last executing test programs: 2.075097873s ago: executing program 0 (id=6613): socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x44884}, 0x2004c000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) 1.829059294s ago: executing program 0 (id=6617): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x7, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000100)={0x24, @none={0x0, 0x3}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x62}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x100}, 0x8, 0x10, 0x0, 0x0, 0x30942, 0xffffffffffffffff, 0x5, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x3, 0x9, 0x3}, {0x2, 0x4, 0x0, 0xb}, {0x1, 0x5, 0xf, 0x5}, {0x1, 0x4, 0xb, 0x7}, {0x1, 0x2, 0x9, 0x4}], 0x10, 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) 1.752087314s ago: executing program 3 (id=6618): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x2000000000000000, 0x8) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="7b4586654929ebff7342b46ecd75adcb10047d86d288d29fb13336c4a22d584f09a3d1a6ee08df5853496fc718341b934231e57cbbca491c0b81835c26d8e377b4c1c5760e1915b1c09c8001614a09d46b1107eb4a5b5345817952affeb29bc31814ba27af2b73b8e404da7f"], 0x40}}, 0x48010) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r4) close(r5) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x48, 0x0, 0x1, 0x5, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x9, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC=r6], 0x1c}}, 0x200400c9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="dc0000001e00010a00000000000000000002"], 0xdc}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x11, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x19}}}}}) 1.750583262s ago: executing program 4 (id=6619): socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x374, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff2, 0x1}, {0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x268, 0x2, [@TCA_U32_SEL={0x264, 0x5, {0x10, 0x49, 0x85, 0x89, 0x7ff, 0x6, 0x6, 0x4, [{0x40, 0x101, 0x2, 0x5}, {0x2, 0x93, 0x390, 0x4}, {0x81, 0x2, 0x3c00, 0x9}, {0x24c, 0x8, 0x3, 0x1}, {0x8, 0x7, 0x6, 0x101}, {0x2, 0x8001, 0x2, 0x9}, {0x0, 0x7, 0x6, 0xfffffffa}, {0x4, 0xe69, 0x8, 0x80}, {0xda, 0x7ff, 0x0, 0x7}, {0x3, 0x0, 0x3}, {0x1000, 0x0, 0x7f, 0xa7}, {0xe000000, 0x7, 0x0, 0x3}, {0x4, 0x69f6bc9a, 0x7, 0x3}, {0xc2, 0x2, 0x7, 0x6}, {0x8000, 0x3, 0x5, 0x8}, {0x8, 0x1, 0x0, 0x32}, {0xfdd2, 0x9, 0x2, 0x200}, {0xfff, 0x7ff, 0x5, 0x6}, {0x3, 0xb, 0x400, 0xffffff64}, {0x3, 0x9, 0x0, 0x1}, {0x5, 0x6, 0x1, 0x5}, {0x9, 0x10, 0xfffffff8, 0x3}, {0x5, 0xfff, 0x4, 0x7}, {0x3, 0x5, 0x1, 0xe565}, {0x7, 0x3d3731c1, 0x4, 0xffffffff}, {0x8, 0xf, 0x9}, {0x40, 0x2, 0x4, 0x8}, {0x5, 0x5148, 0x5, 0x7}, {0x14000, 0x6, 0x87, 0x4}, {0x2, 0x80000001, 0x5, 0x9}, {0x8, 0x40, 0x4, 0x8}, {0x7, 0x7, 0xa, 0xfffffffb}, {0xfffffff7, 0x6, 0x5, 0xade}, {0x970d, 0x6, 0x1, 0x5}, {0x7, 0x1, 0x4, 0x5}, {0x9, 0x5, 0x80000000, 0x8001}, {0x6d3, 0x3, 0x3ff, 0xfffffff7}]}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb8, 0x1, [@m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x85, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x4000000000002, 0x300) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x3) (async, rerun: 64) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="80fdc7000040", 0x6}], 0x1, 0x0, 0x0) (rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000300)=0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40880) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "54fcc1dbadb00b50", "f4d095d17fa5842e23149cba5969c47f", "8da40d64", "eb034ea618e777ea"}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/26, 0x1a, 0x1, &(0x7f0000000540)=""/99, 0x63}, &(0x7f0000000700)=0x40) (async, rerun: 32) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060104000000000000000000060000050001"], 0x1c}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r7, 0x0) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x76, 0x7, 0x1, 0x0, "75fc9de849791e20d5a2372153899a70c65f4dc46c8e076319b268562775856f5068d247e9c3b3abe83ec78146a164bb4ea1aeac0b920b7aa282f83b0b28895ef180557ce72dec96eeb4403f50a7f37f7694b3008d6d5d5194c500e18bef909b76a7ee4238bddab266affdef74eaacba6a53"}]}], {0x14}}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 1.630000913s ago: executing program 0 (id=6620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[], 0x28}}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x23004008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250100000000000000014100000018001700000007ffffffff7564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = getgid() ioctl$TUNSETGROUP(r6, 0x400454ce, r7) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0xffffffffffffffff, r5, r7}, 0xc) 1.584163115s ago: executing program 2 (id=6621): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 1.374155753s ago: executing program 3 (id=6623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x3, 0x0, @multicast2}}}, 0x84) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x80, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 1.031891408s ago: executing program 0 (id=6626): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000580)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000005c0)={0x9, 0x2, 0x6, 0xf, r3}, 0x10) bind$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/205, 0xcd}], 0x1, &(0x7f00000000c0)=""/79, 0x4f}, 0x2143) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f5c0b3c610787769fb68050000", @ANYRES16=r9, @ANYBLOB="00022dbd7000fbdbdf250500000008000500020000004400028008000700ad0200000800050009000000080007000900000005000d000100000008000800f4ffffff05000d000100000006000b000200000005000d00010000000800040006000000"], 0x68}}, 0x4008845) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40010000100001000000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000010000000000000000480002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050019006c000000"], 0x140}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x3, 0x400, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0xfffffffc, 0x8, 0xd, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x9, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1ff, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12000, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0x9, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x3, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0x9, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x9, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0x10, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x2, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x5, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x3, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x6, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0xff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@delqdisc={0xf4, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xfff1}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd241}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffb3}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r13) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000d00)={'wpan0\x00'}) 998.88143ms ago: executing program 4 (id=6628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200025bd7000fdffffff1d00000074002f8008000100070000001c000380050002000300000005000200010000000500020000000000400003800500020001000000050002000100000005000200000000000500020002000000050002000100000008000100030000000c000500ffffffffffffffff0c0002000200aaaaaaaaaaaa30002f800c0002000203aaaaaaaaaaaa1800038008000100000000000c00038006000100010000000800010043f3ffff"], 0xb8}}, 0x4044080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 874.802122ms ago: executing program 4 (id=6629): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r2 = socket(0x2a, 0x80000, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e20}]}}]}, 0x4c}}, 0x24004010) r4 = socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x48000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 660.147498ms ago: executing program 1 (id=6630): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) r1 = epoll_create1(0x80000) r2 = socket(0xa, 0x3, 0x2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) shutdown(r2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x60000008}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r5, r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000006000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r6, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}}, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x7, @empty, 0x1970000}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="04a600213a529c6124db80dfd9f1ee28856568a70862b69647e6c7d6b0caf6fe33d9922100a6756e64543928918f675fe4e35de4dd8c46b74cf95bbe6bdecc0f546d002bb567b7b34b9e8c8f4e269a257ad701a8f3f4f458bb081070c901deb964af6e56f3fdddd25bdaf287f95205dee9c00f907f18eba3ad015b84a71af88b881330a592578103b65dc0adadda109057073a15cd9bc764", 0x98}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000240)="0dc6c37f6ca29c851fccc24b4bfeb893130e23499fa4534410823f292352d21bd59f5a72d91ff3ffa18e2101286150e882aed7ca718d799623d038b53d3bddc4a572d1077eddf96ac7eaa18ef618f0dd0a214b02e02cf2f59dd93e11c7493431604b498bb1552563ed52a8bac2fd66e39e9d9c1204f62122f8db7bb464b036ad212bb8bc99ea20ad2b03ff4c4ce63aed9b4e02221da1c14a0dbb3dc68033bef5cf048187bfc6af21de2f926171764d2195955aa56ec45f6ff9", 0xb9}], 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="040c3c4600000000840000000600000072dd00000000000020000000000000008400000008000000ff0200000000000000000000000000011800000000000000840000000000000006000b00c3ed9e2e304a09200a0020000000000000008400000002000000006400000800176eef6230abbda785b3b2f435724b5254b66aa0713ee6a51ccdd17aa81cdfa9d40c91a0c1202c735df1964a9b15d65b946baa1ed457b3130352585cbaf641e9e42aad166c803e4491c11e130139cab5fc68e306129fdfb4aa84e0d9f0b496589706d10000000000", @ANYRES32=0x0], 0x70, 0x20008040}], 0x1, 0x4004000) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000540)={0x6, 0x1, 0x8002, 0x6, 0x10000, 0xfffffffb, 0x2, 0xffffffff, 0x0}, &(0x7f0000000580)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f00000006c0)={r12, 0x4}, &(0x7f0000000700)=0x8) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xbc}}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000fdffffff000000000000000000000000000000000a74e8d2cbbf07bad0ad388d418b9200c40de23adb2b7777ea68735f9d87c58a8d871a1f4132e7fdf84eabd7641e7d2deaff667469c58df04c22e2d827c5bcee8ed011d2dd2dc21f87785b9ea178fbf88415253d0bc96838a8f6bdd13ab07d4a536e21532f21fa08926306aee61b7d89b17f3e006a289c71caa6aba3aa4a60090453e6585a236c342d2c8b3c4baa73f9b93f8ee8222e0cc333a1cbddaf4310f81dd384b3ea563caffb592bbdc64e4d280a300cd4"], 0x50) 659.877913ms ago: executing program 2 (id=6631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000008c0)="f06e00dcbcfd57c354333182854115b7", 0x10) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x3c}}, 0x0) 622.425443ms ago: executing program 4 (id=6632): r0 = socket(0x11, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007600090b000000000000000003000200000000000800050000000eb5"], 0x20}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0x98, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff4f}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffffff, 0xffffff00, 'geneve0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7f, 0x80000000, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(0x4) getsockname(r3, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @link_local}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 590.935813ms ago: executing program 2 (id=6633): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x28, 0x1, 0x0) connect$packet(r2, &(0x7f0000000500)={0x28}, 0x14) (async) connect$packet(r2, &(0x7f0000000500)={0x28}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c800000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b000100746172676574e5ff2000028008000300d61418f308000240000000010c0001004e46515545554500140000001100010000000000000000000000000a"], 0xd0}}, 0x0) connect$packet(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYBLOB="30009003dbffcbff3db40000", @ANYRES16=r6, @ANYBLOB="01022cbd7000fedbdf25280000000a0001007770616e3000000005002b000200000005002e0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2841}, 0x4000) 439.973002ms ago: executing program 1 (id=6634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r1, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x9c, 0x7, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x199}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x15, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffff15d}, {}, {}, [@ldst={0x1, 0x3, 0x1, 0x8, 0x9, 0x16, 0x4}, @exit, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x7, 0x0, 0x1, 0x20, 0xffffffffffffffeb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0xa0, &(0x7f0000000480)=""/160, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0xb571, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x1, 0x3, 0xe, 0xc}, {0x5, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x2, 0x8}, {0x2, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x2, 0x5}, {0x0, 0x4, 0x2, 0x3}], 0x10, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='GPL\x00', 0x7f, 0x1, &(0x7f00000001c0)=""/1, 0x41100, 0x0, '\x00', r6, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x5, 0x1}, 0x10, r9, r11, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r12 = socket(0xa, 0x3, 0xff) r13 = socket$key(0xf, 0x3, 0x2) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={r11, r4, 0x6, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000a00)=[0x9], 0xffffffffffffffff}}, 0x30) ioctl$FIOCLEX(r14, 0x5451) sendmsg$key(r13, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$inet6(r12, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x9, 0x0, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="67014f00000000", 0x7}, {&(0x7f0000000280)="9e115a3e15e19fbe1365ffb332c99223a7dfe52c1f51218206f5abfd2a2ba30000", 0x21}], 0x2}, 0x20008b88) 439.630219ms ago: executing program 3 (id=6635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 426.961301ms ago: executing program 2 (id=6636): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000508000240f9ffff0214000000110001"], 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0xa23e}]}}) r2 = socket$inet(0x2, 0x2000000000003, 0x2) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r3, 0x7}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6, 0x200}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 381.122905ms ago: executing program 3 (id=6637): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xa4a5}, &(0x7f0000000040)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0x7d, "34c70a4c443360c6733fb631cd371cd4de3fae4b772016201d404d71d3f0d087ea0305926888d3f3b96cd091bd2af3e2fb9f76a1f51a564ff60f8308aff81cf3aecb154955fc2b826aacdf1af58093d81524ba2ca9b3849fc7dc2cc152d598b57d526ba4c852e805c114bef5191f82adaa3bc95ad326b92c72b9eff5dc"}, &(0x7f0000000180)=0x85) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) ioctl$FIONCLEX(r3, 0x5450) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r4, &(0x7f0000000680)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xd, 0x5, 0x3, 0xfffffffffffffff0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0xfff, 0x5}, 0x10, 0x17ffb, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000600)=[{0x2, 0x4, 0x3, 0x4}, {0x5, 0x1, 0xc, 0xa}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x5}, 0x94) (async) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r10, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x5e9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006ce9d82eea87f5dafa51317b72ef97c1f2a2c2427ad8d7fbe6f90b96c1624289b7aa2a30df6671e857"], 0x48) (async) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r15, r16, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r15}, &(0x7f00000006c0), &(0x7f0000000700)=r14}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83d, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffff07d}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3fc000, 0x0, 0x0, 0x0, 0xbbb}, @ldst={0x2, 0x0, 0x7, 0x7, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x8, 0xfffffff1, 0x9}, 0x10, 0x4310, r9, 0x7, &(0x7f0000000840)=[r10, r11, r12, r13, r15], &(0x7f0000000880)=[{0x0, 0x1, 0x2}, {0x4, 0x2, 0xb, 0x6}, {0x5, 0x2, 0x10, 0x9}, {0x2, 0x2, 0xc, 0x7}, {0x4, 0x1, 0x3, 0xb}, {0x3, 0x4, 0x2}, {0x0, 0x3, 0x8, 0x7}], 0x10, 0xc}, 0x94) (async) r17 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r17, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) 315.509065ms ago: executing program 0 (id=6638): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x24}}, 0x40800) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x24}}, 0x40800) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81) syz_emit_ethernet(0x62, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x2c, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x8, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0x3}]}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, "c13aed3de4c5d361c100000000000072d7cb0000"}}}}}}, 0x0) 268.940444ms ago: executing program 1 (id=6639): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x1, 0x0, 0x4, 0x0, 0x2, 0x10, 0x385}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r6], 0x5c}, 0x1, 0x400000000000000}, 0x40000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 268.569745ms ago: executing program 4 (id=6640): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5c855e9b053592b0d99780913386db8d2dc365f2a38b59a481321a93e60a190d6d27b63d00000000000000431bb9ccaab9bf97ae831d27a0df85f7f92eb54d49b551505e4d4d4aa2b4ea3dd2c08670fe6e0c0e3f9ac6e9ebf6776ee1adfeb96d179de434dd2ed60ccc536514f19b761a37ce4e3b0f8c22f9dbe43896dd59a719cc71f39946fc93d0c4"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001300)={0x0, 0x6e2}, &(0x7f0000001340)=0x8) 258.932439ms ago: executing program 2 (id=6641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getae={0x68, 0x1f, 0x800, 0x70bd2a, 0x25dfdbfc, {{@in=@local, 0x4d3, 0x2}, @in=@private=0xa010100, 0x800, 0x3506}, [@replay_esn_val={0x28, 0x17, {0x3, 0x70bd2b, 0x70bd25, 0x70bd26, 0x70bd2a, 0xffffffff, [0x7, 0x7, 0x5]}}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x250}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r10, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14000844) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x4014) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r11, 0xd7735000) r12 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x4053, r13, 0x60b2e000) 226.039595ms ago: executing program 1 (id=6642): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSET={0x2bc, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x1e0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa152}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ee3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59096fce}]}]}, @NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x469}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4d4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff49}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf26}]}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x294, 0x5, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0xf1, 0xc, "714e1e90bec182c42981b27a60dcedd1fa0cd579983a76fce173e4a805e4886ee1393502840adf39bbe7e654fe65e2c5e9e283cedf24fecea672756a9a1c96a573490c45feba69e71fa0ab7d5c8156e71e08e9fbb04655a3b5e6b69a1b9f311756a38cc3d7ee5e5f1e0e64c425bb8171a3b965c64fa2667a1a4d962e553a7cbaeb88328cdf6b3fab1c92284d43b63436638c4b3b6ee7917946104b9159a65edeca0a98e27b59a4163d5296b575774b4c0a5fbef43ecdb7d8ccaea3cce656209e593935a4467eaa6e990afbdd1e918cf0456ccca6dd163135c859f29fb4f1c5c6f867a6b5c6f382e810dbc053be"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x78, 0xc, "ceaaee09e7431e6ac79d064eca40cf6a0fe93bc5235c8ce0bee7fcba715a0a005bf1685c4ee4bd8290190f2f5ab02a6c1a285fc7606da0ae235788cd1caa095c2cc02ee4acb45407cbb197cb725f54f26ad4075ec4d2c1d93e11d9053eb4bfc95c50a6624b4f32e5f199d1ded5dc8d81612195a0"}, @NFTA_CHAIN_USERDATA={0xfe, 0xc, "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"}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 156.460952ms ago: executing program 3 (id=6643): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x820d}, 0x4) getpeername$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60044}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 122.403278ms ago: executing program 1 (id=6644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x7}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) 112.184131ms ago: executing program 4 (id=6645): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000300)="ffbfae84e1b2e3767e7432cb703fab4d6917a9643afe00f9cec4cefe73e7588d0732d176d1d09f60aa") sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a40)={0x2750, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xa64, 0x8, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6fc, @private1, 0x774}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x324, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0a0563ddf557247c76b990aee25c3c2bdd72e4db4bad9bab428a8d8aa1f81b85"}, @WGPEER_A_ALLOWEDIPS={0x2ac, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5669c5f8f197c97e06fe40f7e492d81a762734ae1e77a6549bf26c8fd1aa9d89"}]}, {0x24c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1dc717da6dbfb22e187130f97175a76200bace6111732edc0016cf4aab6eaa52"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "51b8857e146aacbc823a04e27dbcec0f66bd8a9715df3be654c010547d72d89a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0xc, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "afef206eb5de4e894efff46ebd9d58a3f626b0949250b63cfaf37ab5ece8530d"}]}, {0x314, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dd950af6408a1e40abd86a3d0e83841b4f454e95c41cc2efe5b0cb74c3a718db"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4f27bf6d5a2295e58485464084918c8e3a0f53bd1b5992040681f492a73e2f98"}]}]}, @WGDEVICE_A_PEERS={0x4e4, 0x8, 0x0, 0x1, [{0x4e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e7d565808b99d7636bc5ccf66c8a329aed8bd4a5d64432ca3f4fa380d1cdeb5e"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_PEERS={0x788, 0x8, 0x0, 0x1, [{0x310, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x180, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b77c730af21819b9474a0ad3960f2cd4ee7b94d66ac68796890b1d15b71b469d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75ca1d75f5f4fc1f5e686db32d88981fe26ad79142a5ac854af8caaec0f284eb"}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8000, @private1, 0x7fffffff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "24f62affb37f866081162b1363f8496e0be15d4aea3513679d460a141c794a40"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xb4, @mcast2, 0x8}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @loopback, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0xafb}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x1a4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c9f7a5e94fc6d9dffcb1650084f7f1647088d38a24ef043c38a5aed6feb174dc"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_PEERS={0x1020, 0x8, 0x0, 0x1, [{0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "01c5eb99bd379a038689856303555facb191381a2918e717bef6b0ea86c4c865"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x308, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "19e6bf716760e03771f0a4475bdd193d261eef19448c4129cfac3ea248c7b986"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "46cbe5e557f8c3b6f047e68cd2f8283b2d209b877722316076bb1d46e84d32eb"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @empty, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6f2201e28082b234ba5d88c8144f4b1d2dfb8f7d25fe4fde679986a944ab4225"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d83e47990b7d2b5a00ba3319b659594b14aa56c107116041f706a59efc233bed"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010102}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @remote, 0x7eb6909b}}]}, {0xa08, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfc74cd59e0763e901bcd34977d91d25e7bca08c9099f676b66b47f7aeb96da5"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x7fffffff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x480, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4d0, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfb}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a038ac9465822e01878bc09a308bb00ed4074bdaf20c4ce9e2940db3546fc2a1"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4344, @loopback, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private0, 0x3ff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x2750}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) 5.93469ms ago: executing program 1 (id=6646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x40000, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r4}}, 0x40) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r7}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r7, 0x25, 0x10, @val=@netfilter={0x7, 0x1, 0x9, 0x1}}, 0x20) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r2}, 0x18) 5.358276ms ago: executing program 0 (id=6647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e9ff0085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 880.226µs ago: executing program 3 (id=6648): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840", 0x83}], 0x1}, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) write(r0, &(0x7f0000000340)="89737190bc3b6a354b0e6c421b2a8da56af76b0dee2f256c35f51e814673c7bc2cf0b8ae47059e4b88605009453039ad087ce1ee7bcbfa4bef8e4d897139ace06e03fc1083ffa7c4070143b9fb166de286469338b698acc5c87b24e07d888f4abd0a4edae8f18ac7698f39f79235ebfe8e38f0266e2703263bdc6961e1fc6c8af9e6c2d8db3ceeeefe1f2a49815e628278ed1111b96e9aef0b157816b04f718cbff0837a3023278719b5861ff0481f11a87d047e241eab6f559709066b500fc72035f7fe9fb5d395ce8c7d0ec24b195124c0e4fcf1ab67494e57af7b701bcd089377595e7b02eb083fa293783ae6cdf69c59dcfc866e", 0xf6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) r3 = accept(0xffffffffffffffff, &(0x7f0000000180)=@rc, &(0x7f00000000c0)=0x80) (rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=6649): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x78) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001400000000000000008080005400000000114000000110001"], 0xf0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 3.211134][T22701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.367459][T22714] netlink: 'syz.3.4564': attribute type 2 has an invalid length. [ 413.385070][T22714] netlink: 'syz.3.4564': attribute type 1 has an invalid length. [ 413.542584][T22725] netlink: 'syz.4.4565': attribute type 10 has an invalid length. [ 413.625910][T22725] team0: Port device dummy0 added [ 413.644585][T22728] bond0: entered promiscuous mode [ 413.655794][T22728] bond_slave_0: entered promiscuous mode [ 413.661771][T22728] bond_slave_1: entered promiscuous mode [ 413.673000][T22728] bond0: left promiscuous mode [ 413.685577][T22728] bond_slave_0: left promiscuous mode [ 413.691210][T22728] bond_slave_1: left promiscuous mode [ 413.779584][T22724] vlan4: entered allmulticast mode [ 414.951550][T22762] netlink: 'syz.0.4579': attribute type 5 has an invalid length. [ 414.969404][T22762] geneve2: entered promiscuous mode [ 414.982069][T22762] geneve2: entered allmulticast mode [ 414.989540][ T8515] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 415.024559][ T8515] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 415.045094][ T8515] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 415.068217][ T8515] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 415.201338][T22777] veth0_macvtap: entered promiscuous mode [ 415.243877][T22777] macvtap1: entered allmulticast mode [ 415.320944][T22777] veth0_macvtap: entered allmulticast mode [ 415.471984][T22789] __nla_validate_parse: 11 callbacks suppressed [ 415.472002][T22789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4588'. [ 415.528986][T22786] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4588'. [ 415.858562][T22798] netlink: 'syz.0.4589': attribute type 1 has an invalid length. [ 416.118352][T22820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4597'. [ 416.221585][T22828] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4598'. [ 416.242109][T22830] bond4: option resend_igmp: invalid value (32767) [ 416.248833][T22830] bond4: option resend_igmp: allowed values 0 - 255 [ 416.278460][T22830] bond4 (unregistering): Released all slaves [ 416.427891][T22842] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4604'. [ 416.469847][T22844] tipc: Enabling of bearer rejected, failed to enable media [ 416.564008][T22851] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4608'. [ 416.578545][T22851] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4608'. [ 416.588153][T22851] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4608'. [ 417.131538][T22898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4621'. [ 417.941278][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4637'. [ 418.082048][T22963] validate_nla: 2 callbacks suppressed [ 418.082065][T22963] netlink: 'syz.0.4641': attribute type 12 has an invalid length. [ 418.267731][T22975] syzkaller0: entered promiscuous mode [ 418.282441][T22975] syzkaller0: entered allmulticast mode [ 418.389162][T22983] IPv6: NLM_F_REPLACE set, but no existing node found! [ 418.717506][T23006] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 418.994655][T23020] netlink: 'syz.0.4657': attribute type 29 has an invalid length. [ 419.004204][T23020] netlink: 'syz.0.4657': attribute type 29 has an invalid length. [ 419.018590][T23021] netlink: 'syz.1.4656': attribute type 11 has an invalid length. [ 419.058663][T23025] netlink: 'syz.0.4658': attribute type 4 has an invalid length. [ 419.178199][T23033] netlink: 'syz.0.4660': attribute type 11 has an invalid length. [ 419.683883][T23047] openvswitch: netlink: Missing key (keys=40, expected=100) [ 419.944873][T23048] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 419.979858][T23048] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 419.998329][T23048] gretap2: entered promiscuous mode [ 420.011259][T23048] gretap2: entered allmulticast mode [ 420.038046][ T8534] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.050587][ T8534] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.100127][T23065] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 420.101315][ T8534] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.166148][T23055] virt_wifi0 speed is unknown, defaulting to 1000 [ 420.196678][T23073] sctp: [Deprecated]: syz.1.4670 (pid 23073) Use of int in max_burst socket option. [ 420.196678][T23073] Use struct sctp_assoc_value instead [ 420.212774][ T8534] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.272131][T23076] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 420.308694][T23076] netlink: 'syz.0.4672': attribute type 1 has an invalid length. [ 420.534283][T23101] netlink: 'syz.3.4676': attribute type 3 has an invalid length. [ 420.594453][T23099] tipc: Enabled bearer , priority 0 [ 420.638549][T23099] syzkaller0: entered promiscuous mode [ 420.644076][T23099] syzkaller0: entered allmulticast mode [ 420.645244][T23098] netlink: 'syz.1.4679': attribute type 13 has an invalid length. [ 420.666236][T23098] __nla_validate_parse: 7 callbacks suppressed [ 420.666254][T23098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4679'. [ 420.673365][T23099] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 420.742541][T23107] netlink: 'syz.3.4682': attribute type 4 has an invalid length. [ 420.743872][T23105] syzkaller0: entered promiscuous mode [ 420.770197][T23105] syzkaller0: entered allmulticast mode [ 420.782122][T23096] tipc: Resetting bearer [ 420.809049][T23096] tipc: Disabling bearer [ 420.826906][T23113] netlink: 'syz.1.4683': attribute type 1 has an invalid length. [ 420.899147][T23118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4682'. [ 420.935579][T23120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4684'. [ 420.962764][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4684'. [ 421.110848][T23133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.127621][T23133] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.230860][T23143] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4692'. [ 421.283743][T23144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.291165][T23143] syz_tun: refused to change device tx_queue_len [ 421.303058][T23146] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4693'. [ 421.336444][T23146] gretap0: entered promiscuous mode [ 421.353828][T23146] gretap0: left promiscuous mode [ 421.379196][T23146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.683229][T23166] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4701'. [ 421.697918][T23163] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 421.711440][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4700'. [ 421.890760][T23176] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4703'. [ 421.902684][T23176] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4703'. [ 422.853368][T23246] sctp: [Deprecated]: syz.0.4727 (pid 23246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.853368][T23246] Use struct sctp_sack_info instead [ 423.039809][T23258] 8021q: adding VLAN 0 to HW filter on device bond7 [ 423.359953][T23280] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 423.553142][T23287] team0 (unregistering): Port device team_slave_0 removed [ 423.568053][T23287] team0 (unregistering): Port device team_slave_1 removed [ 423.615898][T23294] veth0: mtu greater than device maximum [ 423.774852][T23304] validate_nla: 8 callbacks suppressed [ 423.774870][T23304] netlink: 'syz.1.4747': attribute type 10 has an invalid length. [ 423.812752][T23304] veth0_macvtap: left promiscuous mode [ 423.930588][T23312] netlink: 'syz.2.4749': attribute type 29 has an invalid length. [ 423.940762][T23308] IPVS: Scheduler module ip_vs_sip not found [ 423.959422][T23316] xt_hashlimit: invalid interval [ 424.103576][T23325] netlink: 'syz.4.4753': attribute type 1 has an invalid length. [ 424.126142][T23325] netlink: 'syz.4.4753': attribute type 3 has an invalid length. [ 424.211723][T23331] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 424.332099][T23340] netlink: 'syz.2.4759': attribute type 9 has an invalid length. [ 424.562156][T23340] openvswitch: netlink: Flow key attr not present in new flow. [ 424.653321][T23362] netlink: 'syz.0.4764': attribute type 2 has an invalid length. [ 424.921420][T23391] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.929320][T23391] bridge_slave_1: left allmulticast mode [ 424.936213][T23391] bridge_slave_1: left promiscuous mode [ 424.942200][T23391] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.385799][T23405] netlink: 'syz.3.4777': attribute type 30 has an invalid length. [ 425.624906][T23415] lo: left promiscuous mode [ 425.729053][T23415] erspan0: left promiscuous mode [ 426.111240][T23434] __nla_validate_parse: 24 callbacks suppressed [ 426.111260][T23434] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4785'. [ 426.218692][T23440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4789'. [ 426.504014][T23461] pim6reg1: entered promiscuous mode [ 426.516409][T23461] pim6reg1: entered allmulticast mode [ 426.537867][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4796'. [ 426.721505][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4797'. [ 426.783610][T23473] bond4: option xmit_hash_policy: invalid value (64) [ 426.794179][T23473] bond4 (unregistering): Released all slaves [ 426.885187][T23484] vcan0: entered allmulticast mode [ 426.959151][T23487] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4800'. [ 426.978374][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4803'. [ 427.139314][T23500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4807'. [ 427.249198][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4808'. [ 427.549195][T23520] netlink: 'syz.4.4813': attribute type 8 has an invalid length. [ 427.697820][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4816'. [ 427.731191][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4816'. [ 428.218992][T23573] 8021q: VLANs not supported on ip6gre0 [ 428.475811][T23589] delete_channel: no stack [ 428.841218][T23622] netlink: 'syz.1.4847': attribute type 1 has an invalid length. [ 429.018326][T23642] netlink: 'syz.0.4852': attribute type 1 has an invalid length. [ 429.050744][T23642] bond2: entered promiscuous mode [ 429.057629][T23642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.079572][T23642] netlink: 'syz.0.4852': attribute type 21 has an invalid length. [ 429.092873][T23640] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 429.220553][ T8553] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.386335][ T8553] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.412489][ T8553] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.430363][ T8553] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.458159][T23660] tipc: Enabled bearer , priority 0 [ 429.558873][T23660] syzkaller0: entered promiscuous mode [ 429.570387][T23660] syzkaller0: entered allmulticast mode [ 429.581454][T23660] tipc: Resetting bearer [ 429.627785][T23676] veth3: entered promiscuous mode [ 429.661976][T23660] tipc: Resetting bearer [ 431.251148][T23660] tipc: Disabling bearer [ 431.280753][T23708] bridge0: port 1(ipvlan0) entered blocking state [ 431.287689][T23708] bridge0: port 1(ipvlan0) entered disabled state [ 431.294341][T23708] ipvlan0: entered allmulticast mode [ 431.306383][T23708] bridge0: entered allmulticast mode [ 431.314232][T23708] ipvlan0: left allmulticast mode [ 431.319746][T23708] bridge0: left allmulticast mode [ 431.423184][T23717] __nla_validate_parse: 14 callbacks suppressed [ 431.423204][T23717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4871'. [ 431.439596][T23710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.472216][T23710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.518329][T23723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4873'. [ 431.592935][T23723] bond6: entered promiscuous mode [ 431.616308][T23723] bond6: entered allmulticast mode [ 431.621970][T23723] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.676957][T23710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.687590][T23710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.768483][T23739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4877'. [ 431.785120][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4876'. [ 431.786880][T23739] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4877'. [ 431.804280][T23741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4876'. [ 431.806180][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4877'. [ 431.880167][T23710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.896768][T23710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.934186][T23745] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4878'. [ 432.088344][T23710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.108109][T23710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.241611][ T8532] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.252137][ T8532] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.316830][ T8532] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.325759][ T8532] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.328883][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4888'. [ 432.344816][ T8532] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.355297][ T8532] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.356850][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4888'. [ 432.399595][ T8551] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.415627][ T8551] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.521682][T23780] geneve2: entered promiscuous mode [ 432.533884][T23783] netlink: 'syz.0.4892': attribute type 3 has an invalid length. [ 432.919669][T13898] IPVS: starting estimator thread 0... [ 433.000931][T23821] atomic_op ffff888024563198 conn xmit_atomic 0000000000000000 [ 433.025920][T23821] netlink: 'syz.3.4903': attribute type 12 has an invalid length. [ 433.035128][T23811] IPVS: using max 36 ests per chain, 86400 per kthread [ 433.053253][T23820] ip6tnl0: Caught tx_queue_len zero misconfig [ 433.337561][T23845] netlink: 'syz.4.4912': attribute type 1 has an invalid length. [ 433.346767][T23845] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 433.990165][T23898] netlink: 'syz.3.4927': attribute type 3 has an invalid length. [ 435.913006][T24013] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 435.951566][T24017] ip6gre1: entered promiscuous mode [ 435.975040][T24017] ip6gre1: entered allmulticast mode [ 436.014488][T24017] netlink: 'syz.1.4962': attribute type 1 has an invalid length. [ 436.140341][T24017] veth3: entered promiscuous mode [ 436.266846][T24041] netlink: 'syz.3.4970': attribute type 9 has an invalid length. [ 436.522187][T24067] syzkaller0: entered promiscuous mode [ 436.531696][T24067] syzkaller0: entered allmulticast mode [ 436.602498][T24067] openvswitch: netlink: Multiple metadata blocks provided [ 436.609280][T24069] __nla_validate_parse: 31 callbacks suppressed [ 436.609297][T24069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4976'. [ 436.613168][T24071] netlink: 'syz.4.4978': attribute type 11 has an invalid length. [ 436.633769][T24071] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4978'. [ 436.636433][T24073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4979'. [ 436.772878][T24083] syzkaller0: entered promiscuous mode [ 436.782793][T24083] syzkaller0: entered allmulticast mode [ 436.979613][T24099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 436.998160][T24099] bridge0: entered promiscuous mode [ 437.004740][T24099] macsec1: entered promiscuous mode [ 437.011035][T24099] macsec1: entered allmulticast mode [ 437.017647][T24099] bridge0: entered allmulticast mode [ 437.035665][T24099] bridge0: port 2(macsec1) entered blocking state [ 437.042470][T24099] bridge0: port 2(macsec1) entered disabled state [ 437.075618][T24099] bridge0: left allmulticast mode [ 437.080937][T24099] bridge0: left promiscuous mode [ 437.127494][T24106] netlink: 'syz.0.4985': attribute type 14 has an invalid length. [ 437.340440][T24125] nbd: couldn't find a device at index 0 [ 437.350863][T24125] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4994'. [ 437.445617][T24130] netlink: 'syz.3.4997': attribute type 1 has an invalid length. [ 437.453811][T24130] netlink: 'syz.3.4997': attribute type 1 has an invalid length. [ 437.521851][T24133] .: renamed from bridge_slave_1 [ 437.630064][T24141] netlink: 'syz.4.5000': attribute type 10 has an invalid length. [ 437.641189][T24141] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 437.672196][T24141] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 437.901426][T24158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5006'. [ 437.940258][T24161] netlink: 516 bytes leftover after parsing attributes in process `syz.4.5008'. [ 438.213558][T24176] virt_wifi0 speed is unknown, defaulting to 1000 [ 438.243791][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5011'. [ 438.401114][T24189] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 438.405464][T24169] bridge0: port 2(.) entered blocking state [ 438.410910][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5017'. [ 438.413257][T24169] bridge0: port 2(.) entered forwarding state [ 438.462594][T24191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5017'. [ 438.477300][T24169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.855800][T24210] netlink: 'syz.3.5023': attribute type 5 has an invalid length. [ 438.933769][T24212] IPv6: sit1: Disabled Multicast RS [ 439.156977][T24233] bridge0: port 3(syz_tun) entered blocking state [ 439.180456][T24233] bridge0: port 3(syz_tun) entered disabled state [ 439.202839][T24233] syz_tun: entered allmulticast mode [ 439.236680][T24233] syz_tun: entered promiscuous mode [ 439.266183][T24233] bridge0: port 3(syz_tun) entered blocking state [ 439.272706][T24233] bridge0: port 3(syz_tun) entered forwarding state [ 439.471122][T24253] syzkaller0: entered promiscuous mode [ 439.476891][T24253] syzkaller0: entered allmulticast mode [ 439.803486][T24275] geneve4: entered promiscuous mode [ 439.809453][T24275] geneve4: entered allmulticast mode [ 439.932016][T24284] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 439.945559][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 441.098598][T24358] syzkaller0: entered promiscuous mode [ 441.126942][T24358] syzkaller0: entered allmulticast mode [ 441.172198][T24371] openvswitch: netlink: IP tunnel TTL not specified. [ 441.360583][T24373] smc: net device team0 erased user defined pnetid SYZ2 [ 441.416605][T24383] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.969841][T24421] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.989743][T24421] team0: Cannot enslave team device to itself [ 442.010694][T24432] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 442.185771][T24441] __nla_validate_parse: 14 callbacks suppressed [ 442.185790][T24441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5093'. [ 442.209552][T24441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5093'. [ 442.268735][T24448] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5096'. [ 442.289611][T24450] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 442.383320][T24458] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5102'. [ 442.690710][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'. [ 442.727207][T24482] netlink: 'syz.1.5105': attribute type 1 has an invalid length. [ 442.748145][T24484] vlan3: entered allmulticast mode [ 442.753310][T24484] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 443.122287][T24518] sctp: [Deprecated]: syz.1.5112 (pid 24518) Use of int in max_burst socket option deprecated. [ 443.122287][T24518] Use struct sctp_assoc_value instead [ 443.184639][T24523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5116'. [ 443.476772][T24540] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5114'. [ 443.546112][T24553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5123'. [ 443.569930][T24559] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5125'. [ 443.573042][T24560] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.604649][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5122'. [ 443.747285][T24570] netlink: 'syz.0.5129': attribute type 4 has an invalid length. [ 444.189920][T24605] sctp: [Deprecated]: syz.4.5138 (pid 24605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.189920][T24605] Use struct sctp_sack_info instead [ 444.487548][T24627] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 444.506479][T24627] bond4 (unregistering): Released all slaves [ 444.537062][T24630] netlink: 'syz.0.5145': attribute type 20 has an invalid length. [ 444.755176][T24655] openvswitch: netlink: Unknown key attributes 2 [ 444.955744][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.963795][ C0] lec:lec_tx_timeout: lec0 [ 445.373937][T24700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.606180][T24713] bond7 (unregistering): Released all slaves [ 446.388362][T24766] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 446.582721][T24781] syzkaller0: entered allmulticast mode [ 447.273712][T24840] __nla_validate_parse: 79 callbacks suppressed [ 447.273731][T24840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5213'. [ 447.427824][T24860] netlink: 'syz.1.5218': attribute type 1 has an invalid length. [ 447.428569][T24857] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5219'. [ 447.435816][T24860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5218'. [ 447.472499][T24859] vlan3: entered allmulticast mode [ 447.485052][T24859] geneve1: entered allmulticast mode [ 447.535337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.557148][T24857] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5219'. [ 447.750969][T24880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5225'. [ 448.021428][T24897] netlink: 'syz.3.5228': attribute type 11 has an invalid length. [ 448.055303][T24905] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5229'. [ 448.055318][T24900] netlink: 'syz.3.5228': attribute type 11 has an invalid length. [ 448.088091][T24905] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5229'. [ 448.127702][T24905] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5229'. [ 448.137266][T24905] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5229'. [ 448.163865][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5232'. [ 448.375347][T24922] netlink: 'syz.0.5235': attribute type 1 has an invalid length. [ 448.540153][T24935] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.012861][T24967] netlink: 'syz.1.5251': attribute type 61 has an invalid length. [ 449.163457][T24980] Bluetooth: MGMT ver 1.23 [ 449.317709][T24990] netlink: 'syz.1.5258': attribute type 5 has an invalid length. [ 449.318448][T24992] netlink: 'syz.1.5258': attribute type 5 has an invalid length. [ 449.399018][T25005] netlink: 'syz.3.5263': attribute type 1 has an invalid length. [ 449.415869][T25006] netlink: 'syz.3.5263': attribute type 1 has an invalid length. [ 449.553248][T25013] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 449.554609][T25016] xt_hashlimit: invalid rate [ 450.094469][T25059] netlink: 'syz.1.5278': attribute type 1 has an invalid length. [ 450.140644][T25056] bond7: entered promiscuous mode [ 450.547788][T25086] netlink: 'syz.1.5286': attribute type 11 has an invalid length. [ 450.552192][T25075] bond5: option all_slaves_active: invalid value (222) [ 450.656168][T25075] bond5 (unregistering): Released all slaves [ 450.739661][T25082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.854249][T25102] netlink: 'syz.3.5289': attribute type 3 has an invalid length. [ 451.004249][T25109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.168211][T25123] netlink: 'syz.2.5298': attribute type 1 has an invalid length. [ 451.418090][T25141] netlink: 'syz.1.5303': attribute type 1 has an invalid length. [ 451.446802][T25143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.747063][T25160] bridge0: port 2(batadv1) entered blocking state [ 451.753629][T25160] bridge0: port 2(batadv1) entered disabled state [ 451.767345][T25160] batadv1: entered allmulticast mode [ 451.774410][T25160] batadv1: entered promiscuous mode [ 451.894872][T25176] netem: change failed [ 452.245642][ T8546] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 452.255727][ T8546] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 452.454298][T25226] __nla_validate_parse: 86 callbacks suppressed [ 452.454317][T25226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5327'. [ 452.508709][T25232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5327'. [ 452.586810][T25232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5327'. [ 452.660919][T25243] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5331'. [ 453.644207][T25250] bond5: (slave gretap2): making interface the new active one [ 453.656303][T25250] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 453.666141][T25257] tipc: Enabled bearer , priority 26 [ 453.673047][T25261] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.680341][T25261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.725668][ T8528] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 453.779595][ T8528] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 453.800721][ T8528] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.829638][ T8528] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 453.875203][ T8528] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 453.899249][ T8528] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 453.921291][ T8528] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.931645][ T8528] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 453.942561][ T8528] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 453.945398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.952630][ T8528] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 453.982770][ T8528] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.993909][ T8528] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 454.008258][ T8528] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 454.036515][ T8528] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 454.064242][ T8528] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.073281][ T8528] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 454.184611][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5345'. [ 454.352172][T25312] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5346'. [ 454.387859][T25315] syzkaller0: entered promiscuous mode [ 454.393370][T25315] syzkaller0: entered allmulticast mode [ 455.004360][T25363] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5360'. [ 455.110399][T25368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.199120][T25371] bond8 (unregistering): Released all slaves [ 455.329666][T25379] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 455.367535][T25379] bond8 (unregistering): Released all slaves [ 455.392677][T25393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.474822][T25393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.641442][T25401] validate_nla: 2 callbacks suppressed [ 455.641460][T25401] netlink: 'syz.1.5370': attribute type 1 has an invalid length. [ 455.692662][T25401] 8021q: adding VLAN 0 to HW filter on device bond9 [ 455.718672][T25401] bond9: (slave ip6gretap1): making interface the new active one [ 455.728248][T25401] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 455.773061][T25407] tipc: New replicast peer: 255.255.255.255 [ 455.791309][T25407] tipc: Enabled bearer , priority 10 [ 455.867587][T25414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'. [ 456.068114][T25431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5378'. [ 456.079563][T25431] syzkaller0: entered allmulticast mode [ 456.556714][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 456.711016][T25488] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 456.866367][T25499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.073760][T25518] wireguard0: entered promiscuous mode [ 457.079403][T25518] wireguard0: entered allmulticast mode [ 457.110507][T25518] team0: Device wireguard0 is of different type [ 457.210640][T25530] netlink: 'syz.4.5404': attribute type 13 has an invalid length. [ 457.694023][T25575] __nla_validate_parse: 2 callbacks suppressed [ 457.694041][T25575] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5415'. [ 457.702532][T25565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5410'. [ 457.864886][T25588] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5419'. [ 457.946337][T25592] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 458.149626][T25602] tipc: Enabled bearer , priority 0 [ 458.274423][T25602] syzkaller0: entered promiscuous mode [ 458.280935][T25602] syzkaller0: entered allmulticast mode [ 458.288336][T25602] tipc: Resetting bearer [ 458.328661][T25601] tipc: Resetting bearer [ 458.410119][T25626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5429'. [ 458.434484][T25626] openvswitch: netlink: Duplicate key (type 32). [ 458.494859][T25632] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 458.506748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.515412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.889605][T25601] tipc: Disabling bearer [ 459.915770][ T9216] tipc: Node number set to 2825038204 [ 460.053309][T25641] syzkaller0: entered promiscuous mode [ 460.059333][T25641] syzkaller0: entered allmulticast mode [ 460.174504][T25651] tipc: Enabled bearer , priority 10 [ 460.180319][T25641] ip6t_REJECT: ECHOREPLY is not supported [ 460.216507][T25658] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 460.405874][T25672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5441'. [ 460.689616][T25675] delete_channel: no stack [ 460.994860][T25679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'. [ 461.822995][T25681] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 461.960025][T25688] netlink: 'syz.3.5447': attribute type 1 has an invalid length. [ 461.973656][T25694] xt_SECMARK: invalid mode: 9 [ 462.016111][T25698] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 462.058050][T25688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.113405][T25708] netlink: 'syz.1.5452': attribute type 21 has an invalid length. [ 462.130569][T25710] netlink: 'syz.0.5454': attribute type 1 has an invalid length. [ 462.153323][T25703] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.160594][T25703] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 462.172414][T25703] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 462.214758][T25716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5447'. [ 462.232168][T25710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.240001][T25708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5452'. [ 462.264911][T25688] veth3: entered promiscuous mode [ 462.274869][T25688] bond6: (slave veth3): Enslaving as an active interface with a down link [ 462.304462][T25713] bond6: (slave ip6gretap3): making interface the new active one [ 462.315797][T25713] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 462.335704][T25716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.400754][T25723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5455'. [ 462.418985][T25710] veth3: entered promiscuous mode [ 462.451905][T25710] bond6: (slave veth3): Enslaving as an active interface with a down link [ 462.469831][T25725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5457'. [ 462.532121][T25719] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 462.657798][T25740] netlink: 'syz.1.5457': attribute type 12 has an invalid length. [ 462.670279][T25740] netlink: 'syz.1.5457': attribute type 29 has an invalid length. [ 462.705368][T25740] __nla_validate_parse: 3 callbacks suppressed [ 462.705386][T25740] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5457'. [ 462.730950][T25740] netlink: 59 bytes leftover after parsing attributes in process `syz.1.5457'. [ 462.852682][T25757] netlink: 'syz.3.5464': attribute type 1 has an invalid length. [ 462.885146][T25757] netlink: 'syz.3.5464': attribute type 3 has an invalid length. [ 462.893054][T25757] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5464'. [ 462.923208][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5465'. [ 462.956299][T25766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5466'. [ 462.984661][T25772] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 462.997270][T25770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5465'. [ 463.092024][T25776] syzkaller0: entered promiscuous mode [ 463.108147][T25776] syzkaller0: entered allmulticast mode [ 463.172045][T25776] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 463.202757][T25789] netlink: zone id is out of range [ 463.211488][T25789] netlink: zone id is out of range [ 463.220907][T25789] netlink: zone id is out of range [ 463.229682][T25789] netlink: zone id is out of range [ 463.235494][T25789] netlink: zone id is out of range [ 463.252904][T25789] netlink: zone id is out of range [ 463.264599][T25789] netlink: zone id is out of range [ 463.272482][T25789] netlink: zone id is out of range [ 463.283415][T25789] netlink: zone id is out of range [ 463.288907][T25789] netlink: zone id is out of range [ 463.394117][T25795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5476'. [ 463.431683][ T30] audit: type=1800 audit(1770538190.987:37): pid=25793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5475" name="memory.events" dev="tmpfs" ino=2409 res=0 errno=0 [ 463.475443][T25799] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5478'. [ 463.480105][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5477'. [ 463.520844][T25799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5478'. [ 463.533697][T25799] syzkaller1: entered promiscuous mode [ 463.540672][T25799] syzkaller1: entered allmulticast mode [ 463.756083][T25821] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 463.839960][T25829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.897383][T25829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.733377][T25895] tipc: Invalid UDP bearer configuration [ 464.733432][T25895] tipc: Enabling of bearer rejected, failed to enable media [ 464.885686][T25903] nbd2: detected capacity change from 0 to 127 [ 464.893711][ T5834] block nbd2: Receive control failed (result -32) [ 464.907497][T25531] block nbd2: Send control failed (result -32) [ 464.913711][T25531] block nbd2: Request send failed, requeueing [ 464.923156][ T56] block nbd2: Dead connection, failed to find a fallback [ 464.932630][ T56] block nbd2: shutting down sockets [ 464.945496][ T56] blk_print_req_error: 138 callbacks suppressed [ 464.945513][ T56] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.963113][ T56] buffer_io_error: 138 callbacks suppressed [ 464.963130][ T56] Buffer I/O error on dev nbd2, logical block 0, async page read [ 464.988166][T25531] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.008222][T25531] Buffer I/O error on dev nbd2, logical block 1, async page read [ 465.035207][T25531] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.044720][T25531] Buffer I/O error on dev nbd2, logical block 2, async page read [ 465.112592][T25531] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.154745][T25531] Buffer I/O error on dev nbd2, logical block 3, async page read [ 465.185172][T25531] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.205532][T25531] Buffer I/O error on dev nbd2, logical block 0, async page read [ 465.227105][T25919] netlink: 'syz.0.5518': attribute type 10 has an invalid length. [ 465.235593][T25531] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.256900][T25531] Buffer I/O error on dev nbd2, logical block 1, async page read [ 465.264714][T25531] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.305622][T25531] Buffer I/O error on dev nbd2, logical block 2, async page read [ 465.313440][T25531] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.376837][T25531] Buffer I/O error on dev nbd2, logical block 3, async page read [ 465.385635][T25531] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.415697][T25531] Buffer I/O error on dev nbd2, logical block 0, async page read [ 465.419635][ T6677] lec:lec_start_xmit: lec0:No lecd attached [ 465.423533][T25531] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.498478][T25531] Buffer I/O error on dev nbd2, logical block 1, async page read [ 465.673229][T25531] ldm_validate_partition_table(): Disk read failed. [ 465.697319][T25531] Dev nbd2: unable to read RDB block 0 [ 465.720638][T25531] nbd2: unable to read partition table [ 465.751205][T25531] ldm_validate_partition_table(): Disk read failed. [ 465.764050][T25531] Dev nbd2: unable to read RDB block 0 [ 465.802081][T25531] nbd2: unable to read partition table [ 465.833511][T25944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.941074][T25953] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 465.957139][T25953] bond7 (unregistering): Released all slaves [ 466.028048][T25959] xt_bpf: check failed: parse error [ 466.182568][T25968] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.191763][T25962] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.613871][T25994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.708687][ T30] audit: type=1800 audit(1770538194.267:38): pid=26000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5543" name="memory.events" dev="tmpfs" ino=2468 res=0 errno=0 [ 466.883586][T26008] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 466.931740][T26010] dvmrp0: entered allmulticast mode [ 467.015322][T26015] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 467.060819][T26017] netlink: 'syz.3.5550': attribute type 29 has an invalid length. [ 467.495841][T26058] netlink: 'syz.0.5564': attribute type 10 has an invalid length. [ 467.509033][T26056] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 467.548646][T26059] bond7 (unregistering): Released all slaves [ 467.591896][T26058] team0: Device veth0_macvtap failed to register rx_handler [ 467.681339][T26073] macvlan0: left promiscuous mode [ 467.898626][T26092] xt_ecn: cannot match TCP bits for non-tcp packets [ 468.480376][T26132] Cannot find del_set index 49151 as target [ 468.516273][T26134] __nla_validate_parse: 21 callbacks suppressed [ 468.516292][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5584'. [ 468.604460][T26136] bond4: option min_links: invalid value (18446744073709551614) [ 468.614281][T26136] bond4: option min_links: allowed values 0 - 2147483647 [ 468.623991][T26144] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5584'. [ 468.625264][T26136] bond4 (unregistering): Released all slaves [ 468.666934][T26144] gretap0: entered promiscuous mode [ 468.713612][T26134] gretap0: left promiscuous mode [ 468.744567][T26146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5588'. [ 468.763542][T26134] net_ratelimit: 138 callbacks suppressed [ 468.763554][T26134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.260454][T26189] syzkaller0: entered promiscuous mode [ 469.272077][T26189] syzkaller0: entered allmulticast mode [ 469.519868][T26199] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 469.758158][T26210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5606'. [ 469.868511][T26215] netlink: 'syz.2.5607': attribute type 21 has an invalid length. [ 469.880271][T26215] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.896756][T26215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.904022][T26215] IPv6: NLM_F_CREATE should be set when creating new route [ 469.911665][T26215] IPv6: NLM_F_CREATE should be set when creating new route [ 469.918932][T26215] IPv6: NLM_F_CREATE should be set when creating new route [ 469.986377][T26215] syzkaller0: entered promiscuous mode [ 469.991884][T26215] syzkaller0: entered allmulticast mode [ 470.010166][T26215] 0: reclassify loop, rule prio 0, protocol 800 [ 470.042640][T26229] bond7: entered promiscuous mode [ 470.049387][T26229] 8021q: adding VLAN 0 to HW filter on device bond7 [ 470.078893][T26234] x_tables: duplicate underflow at hook 2 [ 470.197273][T26248] netlink: 'syz.0.5617': attribute type 1 has an invalid length. [ 470.230945][T26248] 8021q: adding VLAN 0 to HW filter on device bond8 [ 470.273678][T26248] veth5: entered promiscuous mode [ 470.283909][T26248] bond8: (slave veth5): Enslaving as an active interface with a down link [ 470.311359][T26254] netlink: 294 bytes leftover after parsing attributes in process `syz.3.5618'. [ 470.320757][T26254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.779449][T26282] netlink: 'syz.0.5627': attribute type 1 has an invalid length. [ 470.814688][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.824981][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5400 ms [ 470.833029][ C0] lec:lec_tx_timeout: lec0 [ 470.916797][T26291] tipc: New replicast peer: 255.255.255.255 [ 470.936362][T26291] tipc: Enabled bearer , priority 10 [ 470.962440][T26291] : entered promiscuous mode [ 471.169737][T26314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5639'. [ 471.170449][T26315] netlink: 'syz.1.5640': attribute type 29 has an invalid length. [ 471.192361][T26315] netlink: 'syz.1.5640': attribute type 29 has an invalid length. [ 471.206073][T26315] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5640'. [ 471.317513][T26325] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5645'. [ 471.327658][T26326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5643'. [ 471.413705][T26327] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5644'. [ 471.476902][T26325] virt_wifi0 speed is unknown, defaulting to 1000 [ 471.518765][T26332] netlink: 'syz.1.5645': attribute type 12 has an invalid length. [ 471.529273][T26332] netlink: 'syz.1.5645': attribute type 29 has an invalid length. [ 471.579787][T26342] netlink: 'syz.3.5648': attribute type 21 has an invalid length. [ 471.870317][T26364] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 471.883296][T26364] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 472.731956][T26438] validate_nla: 1 callbacks suppressed [ 472.731977][T26438] netlink: 'syz.1.5677': attribute type 1 has an invalid length. [ 472.768818][T26445] netlink: 'syz.0.5678': attribute type 83 has an invalid length. [ 472.782673][T26440] bond8: entered promiscuous mode [ 472.794520][T26438] netlink: 'syz.1.5677': attribute type 2 has an invalid length. [ 472.815803][T26440] bond8: entered allmulticast mode [ 472.821974][T26438] netlink: 'syz.1.5677': attribute type 1 has an invalid length. [ 472.831340][T26440] 8021q: adding VLAN 0 to HW filter on device bond8 [ 472.838608][T26438] netlink: 'syz.1.5677': attribute type 3 has an invalid length. [ 474.495269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.828548][T26498] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 494.877224][T26495] syzkaller0: entered promiscuous mode [ 494.882739][T26495] syzkaller0: entered allmulticast mode [ 494.983254][T26507] __nla_validate_parse: 8 callbacks suppressed [ 494.983271][T26507] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.5697'. [ 495.129552][T26519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5702'. [ 495.176526][T26522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5702'. [ 495.326885][T26537] xt_ecn: cannot match TCP bits for non-tcp packets [ 495.389813][T26530] xt_ecn: cannot match TCP bits for non-tcp packets [ 495.638916][T26555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 496.293184][T26574] IPVS: length: 26 != 24 [ 496.298301][T26574] IPVS: length: 26 != 24 [ 496.306661][T26574] IPVS: length: 26 != 24 [ 496.311075][T26574] IPVS: length: 26 != 24 [ 496.315930][T26574] IPVS: length: 26 != 24 [ 496.320249][T26574] IPVS: length: 26 != 24 [ 496.324630][T26574] IPVS: length: 26 != 24 [ 496.330332][T26574] IPVS: length: 26 != 24 [ 496.334765][T26574] IPVS: length: 26 != 24 [ 496.341760][T26574] IPVS: length: 26 != 24 [ 496.347835][T26574] IPVS: length: 26 != 24 [ 496.352167][T26574] IPVS: length: 26 != 24 [ 496.357188][T26574] IPVS: length: 26 != 24 [ 496.361555][T26574] IPVS: length: 26 != 24 [ 496.368966][T26574] IPVS: length: 26 != 24 [ 496.373347][T26574] IPVS: length: 26 != 24 [ 496.393889][T26574] IPVS: length: 26 != 24 [ 496.399090][T26574] IPVS: length: 26 != 24 [ 496.403427][T26574] IPVS: length: 26 != 24 [ 496.441742][T26574] IPVS: length: 26 != 24 [ 496.453422][T26574] IPVS: length: 26 != 24 [ 496.470703][T26582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5721'. [ 496.485355][T26574] IPVS: length: 26 != 24 [ 496.492683][T26574] IPVS: length: 26 != 24 [ 496.505202][T26582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5721'. [ 496.514372][T26574] IPVS: length: 26 != 24 [ 496.546439][T26574] IPVS: length: 26 != 24 [ 496.561048][T26574] IPVS: length: 26 != 24 [ 496.579940][T26574] IPVS: length: 26 != 24 [ 496.595080][T26574] IPVS: length: 26 != 24 [ 496.599380][T26574] IPVS: length: 26 != 24 [ 496.603647][T26574] IPVS: length: 26 != 24 [ 496.633576][T26574] IPVS: length: 26 != 24 [ 496.655190][T26574] IPVS: length: 26 != 24 [ 496.659495][T26574] IPVS: length: 26 != 24 [ 496.803478][T26593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5726'. [ 496.831825][T26595] netlink: 'syz.0.5727': attribute type 10 has an invalid length. [ 496.906294][T26595] team0 (unregistering): Port device team_slave_0 removed [ 496.956035][T26595] team0 (unregistering): Port device team_slave_1 removed [ 497.010414][T26604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5731'. [ 497.070485][T26604] bond8: entered promiscuous mode [ 497.076709][T26604] bond8: entered allmulticast mode [ 497.082326][T26604] 8021q: adding VLAN 0 to HW filter on device bond8 [ 497.105725][T26608] netlink: 'syz.0.5732': attribute type 2 has an invalid length. [ 497.111854][T26605] macvlan2: entered promiscuous mode [ 497.113614][T26608] netlink: 119 bytes leftover after parsing attributes in process `syz.0.5732'. [ 497.129232][T26605] macvlan2: entered allmulticast mode [ 497.138016][T26605] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 497.183618][T26611] veth0: entered promiscuous mode [ 497.193959][T26610] veth0: left promiscuous mode [ 497.662912][T26638] syzkaller0: entered promiscuous mode [ 497.686173][T26638] syzkaller0: entered allmulticast mode [ 497.727754][T26642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5740'. [ 497.917110][T26659] netlink: 'syz.2.5744': attribute type 1 has an invalid length. [ 498.699509][T26717] syzkaller1: entered promiscuous mode [ 498.705370][T26717] syzkaller1: entered allmulticast mode [ 498.828078][T26721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.851977][T26721] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.885392][T26721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.152307][T26745] bond4: entered allmulticast mode [ 499.169478][T26745] bridge5: entered promiscuous mode [ 499.175169][T26745] bridge5: entered allmulticast mode [ 499.186534][T26745] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 500.097989][T26810] __nla_validate_parse: 38 callbacks suppressed [ 500.098008][T26810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5779'. [ 500.183348][T26815] netlink: 'syz.4.5784': attribute type 1 has an invalid length. [ 500.281758][T26828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5787'. [ 500.358677][T26831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.436872][T26836] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 500.444654][T26836] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5790'. [ 500.471928][T26836] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 500.499612][T26836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5790'. [ 500.624789][T26853] geneve2: entered promiscuous mode [ 500.653806][ T8541] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 56648 - 0 [ 500.680882][ T8541] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 56648 - 0 [ 500.708220][ T8541] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 56648 - 0 [ 500.718869][ T8541] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 56648 - 0 [ 500.733037][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5800'. [ 500.841410][T26873] netlink: 'syz.3.5803': attribute type 1 has an invalid length. [ 500.872726][T26871] syzkaller0: entered promiscuous mode [ 500.879303][T26871] syzkaller0: entered allmulticast mode [ 501.021193][T26885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5807'. [ 501.045833][T26885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5807'. [ 501.114129][T26885] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5807'. [ 501.129063][T26885] netlink: Unknown conntrack attr (0) [ 501.135261][T26886] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5807'. [ 501.154155][T26886] netlink: Unknown conntrack attr (0) [ 501.175408][T26885] syzkaller0: entered promiscuous mode [ 501.180913][T26885] syzkaller0: entered allmulticast mode [ 501.292879][T26898] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 501.307350][T26900] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5813'. [ 501.384526][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.448673][T26906] openvswitch: netlink: VXLAN extension 187 out of range max 1 [ 501.458767][T26906] : renamed from bond0 (while UP) [ 501.750538][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.767193][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.776168][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.784695][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.792792][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.820574][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.828175][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.835768][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.843761][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.851701][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.054024][T26919] virt_wifi0 speed is unknown, defaulting to 1000 [ 502.180949][T26946] netlink: 'syz.1.5822': attribute type 32 has an invalid length. [ 502.234687][T26948] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 502.502133][T26919] chnl_net:caif_netlink_parms(): no params data found [ 502.677344][T26919] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.692175][T26919] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.717757][T26919] bridge_slave_0: entered allmulticast mode [ 502.727383][T26919] bridge_slave_0: entered promiscuous mode [ 502.736998][T26919] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.744365][T26919] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.752156][T26919] bridge_slave_1: entered allmulticast mode [ 502.766938][T26919] bridge_slave_1: entered promiscuous mode [ 502.823914][T26919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.849097][T26919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.909623][T26919] team0: Port device team_slave_0 added [ 502.931440][T26919] team0: Port device team_slave_1 added [ 502.989847][T26919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.998050][T26919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.025635][T26919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.048379][T26919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.057209][T26919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.099923][T26919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.242902][T26919] hsr_slave_0: entered promiscuous mode [ 503.270073][T26919] hsr_slave_1: entered promiscuous mode [ 503.297025][T26919] debugfs: 'hsr0' already exists in 'hsr' [ 503.302795][T26919] Cannot create hsr debugfs directory [ 503.383311][T27019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.667180][T26919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.679513][T26919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 503.690420][T26919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.691670][T27038] netlink: 'syz.1.5850': attribute type 1 has an invalid length. [ 503.768059][T27041] tunl0: Caught tx_queue_len zero misconfig [ 503.849670][T26919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.887442][T26919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 503.898726][T26919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.935488][ T52] Bluetooth: hci1: command tx timeout [ 503.947410][T27049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.066838][T26919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.077947][T26919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 504.091550][T26919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.154418][T27062] netlink: 'syz.0.5858': attribute type 16 has an invalid length. [ 504.186674][T27062] netlink: 'syz.0.5858': attribute type 17 has an invalid length. [ 504.226106][T26919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.256090][T26919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 504.270459][T26919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.305646][T27062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.495572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.591343][T27084] netlink: 'syz.4.5867': attribute type 64 has an invalid length. [ 504.664449][T26919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.716408][T26919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.738298][T27089] syzkaller1: entered promiscuous mode [ 504.745098][T27089] syzkaller1: entered allmulticast mode [ 504.759056][T26919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.855762][T26919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 504.921858][T27108] Can't find ip_set type bitmap:ip,mac [ 504.951209][T27118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.951991][T27114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 505.118738][T26919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.178313][T26919] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.220965][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.228273][ T8538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.327272][T27139] __nla_validate_parse: 16 callbacks suppressed [ 505.327290][T27139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5878'. [ 505.371972][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.379163][ T8541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.582971][T27153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5885'. [ 505.603874][T27157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5886'. [ 505.659526][T27157] 8021q: adding VLAN 0 to HW filter on device bond9 [ 505.717756][T27166] netlink: 'syz.0.5887': attribute type 9 has an invalid length. [ 505.742750][T27166] netlink: 'syz.0.5887': attribute type 11 has an invalid length. [ 505.757702][T27166] netlink: 'syz.0.5887': attribute type 12 has an invalid length. [ 505.768138][T27166] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5887'. [ 505.779249][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5887'. [ 505.885761][T27175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5890'. [ 505.999067][T27184] netlink: 209664 bytes leftover after parsing attributes in process `syz.1.5891'. [ 506.015096][ T52] Bluetooth: hci1: command tx timeout [ 506.037952][T27184] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 506.096179][T27191] netlink: 'syz.4.5895': attribute type 9 has an invalid length. [ 506.192177][T26919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.367167][T26919] veth0_vlan: entered promiscuous mode [ 506.467588][T26919] veth1_vlan: entered promiscuous mode [ 506.500940][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5899'. [ 506.629593][T26919] veth0_macvtap: entered promiscuous mode [ 506.640043][T26919] veth1_macvtap: entered promiscuous mode [ 506.683429][T26919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.720734][T26919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.757424][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.778831][ T8541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.789410][ T8541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.814336][ T8541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.825261][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 506.833285][ C0] lec:lec_tx_timeout: lec0 [ 506.997630][ T8541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.999130][T27242] set match dimension is over the limit! [ 507.015987][ T8541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.052964][T27244] netlink: 'syz.0.5908': attribute type 1 has an invalid length. [ 507.065267][T27244] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5908'. [ 507.073317][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.092192][T27244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5908'. [ 507.101320][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.130999][T27244] IPv6: Can't replace route, no match found [ 507.395844][T27266] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 507.408997][T27266] bond10 (unregistering): Released all slaves [ 507.532527][T27283] netlink: 'syz.0.5917': attribute type 12 has an invalid length. [ 507.590577][T27287] netlink: 'syz.4.5919': attribute type 21 has an invalid length. [ 508.095802][ T52] Bluetooth: hci1: command tx timeout [ 510.175896][ T52] Bluetooth: hci1: command tx timeout [ 510.353577][T27269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.489713][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 510.513731][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 510.529714][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 511.010062][T27345] syzkaller0: entered promiscuous mode [ 511.029400][T27345] syzkaller0: entered allmulticast mode [ 511.060927][T27305] infiniband syz2: set down [ 511.065756][T27305] infiniband syz2: added vxcan1 [ 511.071036][ T5908] vxcan1 speed is unknown, defaulting to 1000 [ 511.170479][T27305] RDS/IB: syz2: added [ 511.203898][T27305] smc: adding ib device syz2 with port count 1 [ 511.227291][T27305] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 511.240592][T27357] __nla_validate_parse: 137 callbacks suppressed [ 511.240608][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5939'. [ 511.255257][T27356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5939'. [ 511.297117][ T5894] vxcan1 speed is unknown, defaulting to 1000 [ 511.323171][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 511.331139][T27356] netlink: 'syz.2.5939': attribute type 10 has an invalid length. [ 511.349248][T27356] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5939'. [ 511.385391][T27371] sctp: [Deprecated]: syz.4.5942 (pid 27371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.385391][T27371] Use struct sctp_sack_info instead [ 511.927801][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 512.111987][T27392] syzkaller0: entered promiscuous mode [ 512.125102][T27392] syzkaller0: entered allmulticast mode [ 512.504020][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 512.888291][T27440] sctp: [Deprecated]: syz.2.5956 (pid 27440) Use of int in maxseg socket option. [ 512.888291][T27440] Use struct sctp_assoc_value instead [ 513.047675][T27440] bond1 (unregistering): Released all slaves [ 513.183918][T27460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5956'. [ 513.484046][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 513.882833][T27494] mac80211_hwsim hwsim35 wlan0: Caught tx_queue_len zero misconfig [ 514.089776][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 514.116297][T27505] netlink: 'syz.0.5969': attribute type 23 has an invalid length. [ 514.383559][T27513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5971'. [ 514.436231][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 514.643604][T27522] tipc: Started in network mode [ 514.654743][T27522] tipc: Node identity 36223657febe, cluster identity 4711 [ 514.675804][T27522] tipc: Enabled bearer , priority 0 [ 514.750976][T27518] tipc: Disabling bearer [ 514.828895][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 515.140740][T27535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5977'. [ 515.215834][T27535] bond1: (slave erspan0): Device is not bonding slave [ 515.248439][T27535] bond1: option active_slave: invalid value (erspan0) [ 515.288516][T27535] bond1 (unregistering): Released all slaves [ 515.339795][T27305] vxcan1 speed is unknown, defaulting to 1000 [ 515.579516][T27553] xt_ecn: cannot match TCP bits for non-tcp packets [ 515.919866][T27565] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5984'. [ 515.925697][T27567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5982'. [ 516.049206][T27575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5986'. [ 516.076973][T27572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5985'. [ 516.634677][T27596] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5990'. [ 519.344839][T27619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5994'. [ 519.594046][T27596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.807986][T27639] delete_channel: no stack [ 519.962654][T27645] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.991263][T27651] 8021q: VLANs not supported on ip6gre0 [ 520.013580][T27652] netlink: 'syz.1.5998': attribute type 39 has an invalid length. [ 520.034631][T27645] vxcan1 speed is unknown, defaulting to 1000 [ 520.073278][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5998'. [ 520.203353][ C1] vcan0: j1939_tp_rxtimer: 0xffff888144bb0c00: rx timeout, send abort [ 520.288509][T27657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.387357][T27646] syzkaller1: entered promiscuous mode [ 520.392968][T27646] syzkaller1: entered allmulticast mode [ 520.690779][ T5908] IPVS: starting estimator thread 0... [ 520.703487][ C1] vcan0: j1939_tp_rxtimer: 0xffff888144bb1000: rx timeout, send abort [ 520.711907][ C1] vcan0: j1939_tp_rxtimer: 0xffff888144bb0c00: abort rx timeout. Force session deactivation [ 520.805889][T27684] IPVS: using max 40 ests per chain, 96000 per kthread [ 521.183360][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.211781][ C1] vcan0: j1939_tp_rxtimer: 0xffff888144bb1000: abort rx timeout. Force session deactivation [ 521.223769][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.237894][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.246652][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.254232][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.681062][T27698] virt_wifi0 speed is unknown, defaulting to 1000 [ 521.788435][T27698] vxcan1 speed is unknown, defaulting to 1000 [ 521.854921][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6025'. [ 521.875807][T27728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6025'. [ 522.005249][T27735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6027'. [ 522.344673][T27746] syzkaller1: entered promiscuous mode [ 522.363776][T27746] syzkaller1: entered allmulticast mode [ 522.513525][T27757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6033'. [ 522.598357][T27757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6033'. [ 522.622340][T27760] netlink: 'syz.2.6034': attribute type 1 has an invalid length. [ 522.639032][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6034'. [ 522.699990][T27761] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6034'. [ 522.831805][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'. [ 522.865612][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'. [ 522.881548][T27737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 522.890476][T27737] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 523.051161][T27777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6038'. [ 523.153834][T27698] chnl_net:caif_netlink_parms(): no params data found [ 523.295476][ T52] Bluetooth: hci5: command tx timeout [ 523.312057][T27737] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 523.326393][T27737] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 523.624142][T27795] nbd: couldn't find a device at index 0 [ 523.974073][T27698] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.999402][T27698] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.032126][T27698] bridge_slave_0: entered allmulticast mode [ 524.052260][T27698] bridge_slave_0: entered promiscuous mode [ 524.161380][T27817] bond9: option xmit_hash_policy: invalid value (64) [ 524.179592][T27828] netlink: 'syz.2.6049': attribute type 62 has an invalid length. [ 524.268243][T27817] bond9 (unregistering): Released all slaves [ 524.477244][T27698] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.485826][T27698] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.512634][T27698] bridge_slave_1: entered allmulticast mode [ 524.546665][T27698] bridge_slave_1: entered promiscuous mode [ 524.746943][T27698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.838135][T27698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.975930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.013983][T27698] team0: Port device team_slave_0 added [ 525.062157][T27698] team0: Port device team_slave_1 added [ 525.233444][T27698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.262273][T27698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.293629][T27698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.426190][T27876] bridge8: port 1(veth5) entered blocking state [ 525.432742][T27876] bridge8: port 1(veth5) entered disabled state [ 525.441575][T27876] veth5: entered allmulticast mode [ 525.470540][T27876] veth5: entered promiscuous mode [ 525.506818][T27885] bridge8: port 2(veth0_to_bond) entered blocking state [ 525.513895][T27885] bridge8: port 2(veth0_to_bond) entered disabled state [ 525.526139][T27885] veth0_to_bond: entered allmulticast mode [ 525.534259][T27885] veth0_to_bond: entered promiscuous mode [ 525.567686][T27698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.593929][T27698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.645207][T27698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.872812][T27698] hsr_slave_0: entered promiscuous mode [ 525.903820][T27698] hsr_slave_1: entered promiscuous mode [ 525.946659][T27698] debugfs: 'hsr0' already exists in 'hsr' [ 525.963597][T27913] rdma_rxe: rxe_newlink: failed to add erspan0 [ 525.976166][T27698] Cannot create hsr debugfs directory [ 526.612032][T27950] netlink: 'syz.1.6075': attribute type 21 has an invalid length. [ 526.662260][T27950] netlink: 'syz.1.6075': attribute type 22 has an invalid length. [ 526.691133][T27950] netlink: 'syz.1.6075': attribute type 23 has an invalid length. [ 526.736565][T27950] netlink: 'syz.1.6075': attribute type 25 has an invalid length. [ 526.765383][T27950] netlink: 'syz.1.6075': attribute type 26 has an invalid length. [ 526.811370][T27698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.852395][T27698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.897899][T27698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 527.009939][T27963] tipc: Invalid UDP bearer configuration [ 527.009988][T27963] tipc: Enabling of bearer rejected, failed to enable media [ 527.113985][T27969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.193647][T27982] __nla_validate_parse: 12 callbacks suppressed [ 527.193668][T27982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6078'. [ 527.282491][T27958] dvmrp0: entered promiscuous mode [ 527.327236][T27969] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6078'. [ 527.402440][T27979] syzkaller0: entered promiscuous mode [ 527.408287][T27979] syzkaller0: entered allmulticast mode [ 527.497602][T27698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.509391][T27698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.529090][T27698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 527.874361][T27698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.910374][T27698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.953169][T27698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 528.018631][T28003] wireguard0: entered promiscuous mode [ 528.044482][T28003] wireguard0: entered allmulticast mode [ 528.051113][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6083'. [ 528.076552][T28005] veth0: entered promiscuous mode [ 528.083591][T28013] tipc: Enabling of bearer rejected, failed to enable media [ 528.570542][T27698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.599994][T27698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.625574][T27698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 528.695459][T28040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6087'. [ 529.899771][T27698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.963602][T27698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.973992][T28074] netlink: 'syz.4.6094': attribute type 2 has an invalid length. [ 530.003599][T27698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.028343][T28079] xt_HMARK: spi-set and port-set can't be combined [ 530.059385][T28074] 9: entered promiscuous mode [ 530.070450][T27698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.146948][T28080] block nbd3: not configured, cannot reconfigure [ 530.559427][T27698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.649620][T27698] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.690842][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.698364][ T8538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.792603][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.799814][ T8546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.194806][T28142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6105'. [ 531.550573][T28156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6109'. [ 531.594007][T27698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.684676][T28159] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6110'. [ 531.760246][T28167] syzkaller0: entered promiscuous mode [ 531.830005][T28167] syzkaller0: entered allmulticast mode [ 531.895588][T28173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6113'. [ 531.945499][T28173] nbd: must specify a device to reconfigure [ 532.215236][T27698] veth0_vlan: entered promiscuous mode [ 532.295620][T27698] veth1_vlan: entered promiscuous mode [ 532.493032][T27698] veth0_macvtap: entered promiscuous mode [ 532.562740][T27698] veth1_macvtap: entered promiscuous mode [ 532.638033][T27698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.667872][T28199] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6120'. [ 532.688332][T27698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.736710][ T6677] lec:lec_start_xmit: lec0:No lecd attached [ 532.796955][T28210] delete_channel: no stack [ 532.952382][ T8528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.975730][ T8528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.977970][T28217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6125'. [ 533.029672][T28221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6127'. [ 533.040751][T28225] netlink: 'syz.2.6128': attribute type 1 has an invalid length. [ 533.050647][ T8528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.076962][ T8201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.101567][T28216] delete_channel: no stack [ 533.129511][T28220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6127'. [ 533.363777][ T8528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.369824][T28239] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 533.386179][ T8528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.511102][T28245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6133'. [ 533.540423][ T5991] IPVS: starting estimator thread 0... [ 533.546721][ T8546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.562656][ T8546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.576924][T28251] netlink: 'syz.1.6135': attribute type 1 has an invalid length. [ 533.585248][T28252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6135'. [ 533.594448][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6133'. [ 533.667864][T28250] IPVS: using max 36 ests per chain, 86400 per kthread [ 533.709950][T28261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6136'. [ 533.772992][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6137'. [ 533.831386][T28269] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6138'. [ 533.848276][ T52] block nbd3: Receive control failed (result -107) [ 535.288636][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 535.312493][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 535.322942][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 535.331125][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 535.340775][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 535.440098][T28365] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 535.514544][T28353] virt_wifi0 speed is unknown, defaulting to 1000 [ 535.560453][T28353] vxcan1 speed is unknown, defaulting to 1000 [ 535.671902][T28368] xt_hashlimit: size too large, truncated to 1048576 [ 535.980444][T28386] netlink: 'syz.2.6170': attribute type 39 has an invalid length. [ 536.043244][T28387] tunl0: entered promiscuous mode [ 536.072449][T28387] netlink: 'syz.0.6169': attribute type 3 has an invalid length. [ 536.167632][T28395] netlink: 'syz.1.6171': attribute type 5 has an invalid length. [ 536.254163][T28395] geneve3: entered promiscuous mode [ 536.288190][T28395] geneve3: entered allmulticast mode [ 536.310100][ T75] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 536.346332][ T75] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 536.414075][ T75] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 536.454164][ T75] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 536.482431][T28412] netlink: 'syz.1.6176': attribute type 1 has an invalid length. [ 536.844659][T28412] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 536.996863][T28426] netlink: 'syz.1.6177': attribute type 1 has an invalid length. [ 537.034315][T28426] netlink: 'syz.1.6177': attribute type 2 has an invalid length. [ 537.065127][T28426] netlink: 'syz.1.6177': attribute type 2 has an invalid length. [ 537.072894][T28426] netlink: 'syz.1.6177': attribute type 2 has an invalid length. [ 537.221010][T28443] Bluetooth: MGMT ver 1.23 [ 537.232771][T28353] chnl_net:caif_netlink_parms(): no params data found [ 537.379694][ T52] Bluetooth: hci3: command tx timeout [ 537.444874][T28450] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 537.714526][T28465] openvswitch: netlink: IP tunnel dst address not specified [ 537.724444][T28353] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.743584][T28353] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.774972][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 537.783016][ C0] lec:lec_tx_timeout: lec0 [ 537.795771][T28353] bridge_slave_0: entered allmulticast mode [ 537.803514][T28353] bridge_slave_0: entered promiscuous mode [ 537.836377][T28353] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.843528][T28353] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.895258][T28353] bridge_slave_1: entered allmulticast mode [ 537.903128][T28353] bridge_slave_1: entered promiscuous mode [ 537.965542][T28480] __nla_validate_parse: 12 callbacks suppressed [ 537.965560][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6194'. [ 538.028176][T28480] openvswitch: netlink: Flow actions attr not present in new flow. [ 538.040776][T28353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.060279][T28353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.090838][T28482] bond10: (slave gretap5): making interface the new active one [ 538.110968][T28482] bond10: (slave gretap5): Enslaving as an active interface with an up link [ 538.264289][T28492] validate_nla: 1 callbacks suppressed [ 538.264307][T28492] netlink: 'syz.0.6200': attribute type 1 has an invalid length. [ 538.268389][T28353] team0: Port device team_slave_0 added [ 538.270419][T28492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.297470][T28494] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.316578][T28494] bridge0: entered allmulticast mode [ 538.332610][T28353] team0: Port device team_slave_1 added [ 538.453994][T28496] syzkaller0: entered promiscuous mode [ 538.475407][T28496] syzkaller0: entered allmulticast mode [ 538.586377][T28353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.595129][T28353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.622182][T28509] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6206'. [ 538.623399][T28496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6201'. [ 538.640860][T28353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.654282][T28353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.661664][T28353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.691560][T28516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6206'. [ 538.724542][T28353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.781967][T28496] tipc: Resetting bearer [ 538.822265][T28496] tipc: Disabling bearer [ 538.869449][ T8535] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.881270][ T8535] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.933955][ T8535] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.945563][ T8535] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.059409][T28353] hsr_slave_0: entered promiscuous mode [ 539.070848][T28353] hsr_slave_1: entered promiscuous mode [ 539.095986][T28353] debugfs: 'hsr0' already exists in 'hsr' [ 539.105501][T28353] Cannot create hsr debugfs directory [ 539.180310][T28541] netlink: 'syz.0.6215': attribute type 1 has an invalid length. [ 539.209618][T28540] netlink: 'syz.3.6214': attribute type 11 has an invalid length. [ 539.249668][T28541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.269510][T28540] netlink: 'syz.3.6214': attribute type 4 has an invalid length. [ 539.292550][T28541] vlan0: entered promiscuous mode [ 539.298378][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6217'. [ 539.307982][T28541] bond1: entered promiscuous mode [ 539.313300][T28541] vlan0: entered allmulticast mode [ 539.315881][T28540] netlink: 'syz.3.6214': attribute type 5 has an invalid length. [ 539.319905][T28544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6216'. [ 539.327070][T28540] netlink: 'syz.3.6214': attribute type 6 has an invalid length. [ 539.336258][T28547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6217'. [ 539.346475][T28540] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.6214'. [ 539.354362][T28541] bond1: entered allmulticast mode [ 539.426943][T28553] netlink: 'syz.3.6218': attribute type 2 has an invalid length. [ 539.434725][T28553] netlink: 'syz.3.6218': attribute type 1 has an invalid length. [ 539.456145][ T52] Bluetooth: hci3: command tx timeout [ 540.081343][T28591] netlink: 'syz.2.6233': attribute type 13 has an invalid length. [ 540.089845][T28584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6230'. [ 540.094248][T28591] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6233'. [ 540.154690][T28353] bond0: (slave netdevsim0): Releasing backup interface [ 540.256510][T28600] bond2: Removing last arp target with arp_interval on [ 540.627519][T28353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.675391][T28639] bond11: option lp_interval: invalid value (0) [ 540.681819][T28639] bond11: option lp_interval: allowed values 1 - 2147483647 [ 540.696040][T28639] bond11 (unregistering): Released all slaves [ 540.752479][T28353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.799794][T28353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.835734][T28353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 541.011656][T28353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.112591][T28353] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.128433][ T8546] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.135572][ T8546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.190463][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.197641][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.535764][ T52] Bluetooth: hci3: command tx timeout [ 541.566207][T28706] syzkaller0: entered promiscuous mode [ 541.571758][T28706] syzkaller0: entered allmulticast mode [ 541.668503][T28353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.918617][T28726] syzkaller0: entered promiscuous mode [ 541.924120][T28726] syzkaller0: entered allmulticast mode [ 542.364083][T28757] geneve2: entered promiscuous mode [ 542.429583][T28353] veth0_vlan: entered promiscuous mode [ 542.559112][T28353] veth1_vlan: entered promiscuous mode [ 542.679326][T28353] veth0_macvtap: entered promiscuous mode [ 542.707039][T28353] veth1_macvtap: entered promiscuous mode [ 542.774302][T28353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.826524][T28353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.832845][T28777] ip6t_srh: unknown srh match flags 4000 [ 542.880469][ T8535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.903416][ T8535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.935852][ T8535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.952517][ T75] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.163794][ T8201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.212815][ T8201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.303153][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.336024][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.477562][T28814] gtp0: entered promiscuous mode [ 543.493874][T28814] gtp0: entered allmulticast mode [ 543.617758][ T52] Bluetooth: hci3: command tx timeout [ 543.662899][T28808] syzkaller0: entered promiscuous mode [ 543.672310][T28808] syzkaller0: entered allmulticast mode [ 543.899131][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.911409][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.920141][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.928715][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.941215][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.589165][T28857] netlink: 'syz.2.6299': attribute type 2 has an invalid length. [ 545.716895][T28861] __nla_validate_parse: 18 callbacks suppressed [ 545.716914][T28861] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6301'. [ 545.723378][T28838] virt_wifi0 speed is unknown, defaulting to 1000 [ 545.811498][ T8534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.825115][ T8534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.836271][ T8534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56648 - 0 [ 545.848819][ T8534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 545.903180][T28878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6305'. [ 545.938383][T28838] vxcan1 speed is unknown, defaulting to 1000 [ 545.945168][T28877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6305'. [ 545.948094][T28876] syzkaller0: entered promiscuous mode [ 545.991316][T28876] syzkaller0: entered allmulticast mode [ 546.020296][ T52] Bluetooth: hci4: command tx timeout [ 546.170249][T28876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6306'. [ 546.255621][ T8534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.311630][ T8534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.353669][ T8534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56648 - 0 [ 546.401176][ T8534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 546.462843][ T8201] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.476515][ T8201] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.496595][ T8201] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.561288][ T8538] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.593014][ T8534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.603801][ T8534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.614434][ T8534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56648 - 0 [ 546.656231][ T8534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 546.740095][T28902] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6313'. [ 546.768311][T28902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6313'. [ 546.809443][ T8534] bond0: (slave netdevsim0): Releasing backup interface [ 546.819949][T28905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6313'. [ 546.839483][ T8534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.850231][ T8534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.861271][ T8534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56648 - 0 [ 546.873476][ T8534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 546.891433][T28905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.922780][T28905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.103371][ T8534] batadv1: left allmulticast mode [ 547.112249][ T8534] batadv1: left promiscuous mode [ 547.119100][ T8534] bridge0: port 2(batadv1) entered disabled state [ 547.128045][ T8534] bridge_slave_0: left allmulticast mode [ 547.133680][ T8534] bridge_slave_0: left promiscuous mode [ 547.142501][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.160325][ T8534] tipc: Resetting bearer [ 547.251442][ T8534] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 547.314113][ T8534] tipc: Disabling bearer [ 547.361187][ T8534] bond3 (unregistering): (slave gretap1): Releasing active interface [ 547.400256][ T8534] bond10 (unregistering): (slave gretap5): Releasing active interface [ 547.846368][ T8534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.860323][ T8534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.871560][ T8534] bond0 (unregistering): Released all slaves [ 547.881145][ T8534] bond1 (unregistering): Released all slaves [ 547.990445][ T8534] bond2 (unregistering): Released all slaves [ 548.095481][ T52] Bluetooth: hci4: command tx timeout [ 548.101445][ T8534] bond3 (unregistering): Released all slaves [ 548.115680][ T8534] bond4 (unregistering): Released all slaves [ 548.217898][ T8534] bond5 (unregistering): Released all slaves [ 548.321021][ T8534] bond6 (unregistering): Released all slaves [ 548.420754][ T8534] bond7 (unregistering): Released all slaves [ 548.433665][ T8534] bond8 (unregistering): Released all slaves [ 548.533513][ T8534] bond9 (unregistering): Released all slaves [ 548.545702][ T8534] bond10 (unregistering): Released all slaves [ 548.569404][T28838] chnl_net:caif_netlink_parms(): no params data found [ 548.701755][ T8534] : left promiscuous mode [ 548.802696][ T8534] tipc: Disabling bearer [ 548.829634][ T8534] tipc: Left network mode [ 548.866993][T28838] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.874307][T28838] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.883269][T28838] bridge_slave_0: entered allmulticast mode [ 548.892939][T28838] bridge_slave_0: entered promiscuous mode [ 548.910618][T28838] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.918457][T28838] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.925844][T28838] bridge_slave_1: entered allmulticast mode [ 548.933478][T28838] bridge_slave_1: entered promiscuous mode [ 549.007660][T28838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.021071][T28838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.073444][T28838] team0: Port device team_slave_0 added [ 549.084143][T28838] team0: Port device team_slave_1 added [ 549.138529][T28838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.149905][T28838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.176481][T28838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.204585][T28838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.212110][T28838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.241834][T28838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.303169][T28838] hsr_slave_0: entered promiscuous mode [ 549.310069][T28838] hsr_slave_1: entered promiscuous mode [ 549.316368][T28838] debugfs: 'hsr0' already exists in 'hsr' [ 549.322189][T28838] Cannot create hsr debugfs directory [ 549.786428][ T8534] hsr_slave_0: left promiscuous mode [ 549.793283][ T8534] hsr_slave_1: left promiscuous mode [ 549.800043][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.815322][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.823638][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.831880][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.859166][ T8534] veth1_macvtap: left promiscuous mode [ 549.864791][ T8534] veth1_vlan: left promiscuous mode [ 549.870363][ T8534] veth0_vlan: left promiscuous mode [ 550.175348][ T52] Bluetooth: hci4: command tx timeout [ 550.294098][ T8534] team0 (unregistering): Port device team_slave_1 removed [ 550.336968][ T8534] team0 (unregistering): Port device team_slave_0 removed [ 550.651246][ T8534] vcan0 (unregistering): left allmulticast mode [ 551.086549][T28838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 551.105620][T28838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 551.113160][ T8534] IPVS: stop unused estimator thread 0... [ 551.122712][T28838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.149809][T28838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.264224][T28838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.290356][T28838] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.312244][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.319372][ T8538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.338498][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.345847][ T8534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.604116][T28838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.667849][T28838] veth0_vlan: entered promiscuous mode [ 551.681332][T28838] veth1_vlan: entered promiscuous mode [ 551.719260][T28838] veth0_macvtap: entered promiscuous mode [ 551.731251][T28838] veth1_macvtap: entered promiscuous mode [ 551.756054][T28838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.773921][T28838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.792135][ T8541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.815649][ T8541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.824395][ T8541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.836548][ T8541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.907655][ T8534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.915780][ T8534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.949586][ T8534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.957941][ T8534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.255332][ T52] Bluetooth: hci4: command tx timeout [ 562.820540][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 564.730926][T28987] sctp: [Deprecated]: syz.3.6318 (pid 28987) Use of int in maxseg socket option. [ 564.730926][T28987] Use struct sctp_assoc_value instead [ 564.750496][T28987] sctp: [Deprecated]: syz.3.6318 (pid 28987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.750496][T28987] Use struct sctp_sack_info instead [ 564.810459][T28997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6316'. [ 564.847465][T28997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6316'. [ 565.002520][T29008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6325'. [ 565.163487][T29022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6328'. [ 565.283001][T29033] ip6gre0: Master is either lo or non-ether device [ 565.399663][T29043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6333'. [ 565.432249][T29050] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6334'. [ 565.432630][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6333'. [ 565.441998][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6336'. [ 565.630570][T29066] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6339'. [ 565.677724][T29074] netlink: 'syz.1.6342': attribute type 33 has an invalid length. [ 565.731638][T29076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.864902][T29087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.865841][T29089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'. [ 565.957507][T29089] 8021q: adding VLAN 0 to HW filter on device bond11 [ 566.398137][T29137] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 566.727712][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.734807][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.756883][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.764046][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.773902][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.785784][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.799691][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.811423][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.819032][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 566.844182][T29162] xt_addrtype: ipv6 does not support BROADCAST matching [ 567.049251][T29182] netlink: 'syz.4.6374': attribute type 2 has an invalid length. [ 567.461184][T29220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.839942][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 567.847267][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 567.847298][ C0] lec:lec_tx_timeout: lec0 [ 567.872526][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 567.895257][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 567.903412][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 567.911907][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 567.939852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 567.958623][T29237] virt_wifi0 speed is unknown, defaulting to 1000 [ 568.143784][T29237] vxcan1 speed is unknown, defaulting to 1000 [ 568.156951][T29236] virt_wifi0 speed is unknown, defaulting to 1000 [ 568.259595][T29250] xt_TCPMSS: Only works on TCP SYN packets [ 568.416374][T29257] netlink: 'syz.1.6386': attribute type 16 has an invalid length. [ 568.445550][T29256] netlink: 'syz.1.6386': attribute type 16 has an invalid length. [ 568.677629][T29259] dvmrp6: entered allmulticast mode [ 568.702427][T18247] bridge0: port 3(syz_tun) entered disabled state [ 568.757993][T18247] syz_tun (unregistering): left allmulticast mode [ 568.767718][T18247] syz_tun (unregistering): left promiscuous mode [ 568.775089][T18247] bridge0: port 3(syz_tun) entered disabled state [ 568.803897][T29236] vxcan1 speed is unknown, defaulting to 1000 [ 569.048022][T29286] netlink: 'syz.1.6396': attribute type 13 has an invalid length. [ 569.072556][T29286] netlink: 'syz.1.6396': attribute type 58 has an invalid length. [ 569.406737][T29308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.491076][T29237] chnl_net:caif_netlink_parms(): no params data found [ 569.882091][T29237] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.916478][T29237] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.936285][ T52] Bluetooth: hci0: command tx timeout [ 569.955538][T29237] bridge_slave_0: entered allmulticast mode [ 569.964032][T29237] bridge_slave_0: entered promiscuous mode [ 570.001879][T29339] __nla_validate_parse: 18 callbacks suppressed [ 570.001896][T29339] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6405'. [ 570.028021][T29237] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.048708][T29237] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.068547][T29237] bridge_slave_1: entered allmulticast mode [ 570.079185][T29237] bridge_slave_1: entered promiscuous mode [ 570.240531][T29237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.308307][T29237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.400518][T29237] team0: Port device team_slave_0 added [ 570.411986][T29237] team0: Port device team_slave_1 added [ 570.483181][T29355] syzkaller1: entered promiscuous mode [ 570.490582][T29355] syzkaller1: entered allmulticast mode [ 570.592264][T29237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.599720][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.630545][T29237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.665564][T29237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.680559][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.731251][T29237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.749966][ T8528] wlan1: Trigger new scan to find an IBSS to join [ 570.852899][T29237] hsr_slave_0: entered promiscuous mode [ 570.859909][T29237] hsr_slave_1: entered promiscuous mode [ 570.869868][T29237] debugfs: 'hsr0' already exists in 'hsr' [ 570.876230][T29237] Cannot create hsr debugfs directory [ 570.932525][T29386] veth1_macvtap: left promiscuous mode [ 571.059548][T29396] netlink: 'syz.1.6422': attribute type 1 has an invalid length. [ 571.092393][T29396] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6422'. [ 571.159662][T29237] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.178051][T29237] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.232704][T29400] IPv6: addrconf: prefix option has invalid lifetime [ 571.239446][T29400] IPv6: addrconf: prefix option has invalid lifetime [ 571.254561][T29400] pim6reg: entered allmulticast mode [ 571.264912][T29237] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.282340][T29237] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.362689][T29237] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.381225][T29405] xt_CT: No such helper "syz1" [ 571.398832][T29237] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.406791][T29415] netlink: 'syz.1.6427': attribute type 11 has an invalid length. [ 571.490136][T29419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6428'. [ 571.491025][T29237] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.519689][T29237] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.632518][T29428] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6431'. [ 571.739539][ T30] audit: type=1800 audit(1770538299.297:39): pid=29433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6429" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=182 res=0 errno=0 [ 571.893585][T29237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 571.948056][T29444] netlink: 766 bytes leftover after parsing attributes in process `syz.4.6435'. [ 571.966934][T29237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 571.970049][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 572.013801][T29237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 572.021524][ T52] Bluetooth: hci0: command tx timeout [ 572.024910][T29457] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6438'. [ 572.080428][T29237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 572.222774][T29475] netlink: 'syz.1.6440': attribute type 1 has an invalid length. [ 572.426972][T29484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 572.451301][T29237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.491197][T29237] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.514048][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.521210][ T8541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.576361][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.583537][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.773814][T29497] team0: Cannot enslave team device to itself [ 572.937397][T29505] netlink: 'syz.2.6448': attribute type 4 has an invalid length. [ 572.955474][T29505] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6448'. [ 572.972325][T29237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.131575][T29237] veth0_vlan: entered promiscuous mode [ 573.158974][T29520] netlink: 'syz.0.6452': attribute type 1 has an invalid length. [ 573.161130][T29237] veth1_vlan: entered promiscuous mode [ 573.206372][T29522] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6453'. [ 573.342158][T29520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.386587][T29237] veth0_macvtap: entered promiscuous mode [ 573.406311][T29525] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 573.464279][T29527] dvmrp0: entered allmulticast mode [ 573.485978][T29237] veth1_macvtap: entered promiscuous mode [ 573.562850][T29237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.600784][T29540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6456'. [ 573.620380][T29237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.713566][ T8528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.741046][ T8528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.778332][ T8528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.797545][ T8528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.026525][ T8534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.045877][ T8534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.095833][ T52] Bluetooth: hci0: command tx timeout [ 574.117293][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.126081][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.812014][T29614] netlink: 'syz.4.6478': attribute type 29 has an invalid length. [ 574.821432][T29614] netlink: 'syz.4.6478': attribute type 29 has an invalid length. [ 575.048590][T29629] xt_TPROXY: Can be used only with -p tcp or -p udp [ 575.123371][T29639] __nla_validate_parse: 11 callbacks suppressed [ 575.123388][T29639] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6487'. [ 575.159969][T29635] syzkaller0: entered promiscuous mode [ 575.165792][T29635] syzkaller0: entered allmulticast mode [ 575.173022][T29636] tipc: Started in network mode [ 575.179202][T29636] tipc: Node identity 3e559a166ee, cluster identity 4711 [ 575.189177][T29636] tipc: Enabled bearer , priority 0 [ 575.231641][T29644] batman_adv: batadv0: Adding interface: dummy0 [ 575.238278][T29644] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.265557][T29644] batman_adv: batadv0: Interface activated: dummy0 [ 575.282459][T29636] bridge0: port 3(batadv1) entered blocking state [ 575.293861][T29636] bridge0: port 3(batadv1) entered disabled state [ 575.307536][T29644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.318870][T29636] batadv1: entered allmulticast mode [ 575.360307][T29648] xt_CT: No such helper "pptp" [ 575.373878][T29636] batadv1: entered promiscuous mode [ 575.399068][T29634] tipc: Resetting bearer [ 575.454070][T29634] tipc: Disabling bearer [ 575.468732][T29653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6492'. [ 575.736473][T29679] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6500'. [ 575.748365][T29679] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.755788][T29679] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.772174][T29679] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6500'. [ 575.790566][ T8201] wlan1: Trigger new scan to find an IBSS to join [ 575.793235][ T75] batman_adv: batadv1: IGMP Querier appeared [ 575.803007][ T75] batman_adv: batadv1: MLD Querier appeared [ 575.820215][T29679] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6500'. [ 575.852991][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6501'. [ 575.863679][T29684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6501'. [ 575.886564][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6501'. [ 575.886650][ T8534] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.896830][T29684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6501'. [ 575.913659][ T8534] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.913696][ T8534] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.913726][ T8534] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.112420][T29698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'. [ 576.163697][ T5948] IPVS: starting estimator thread 0... [ 576.182617][ T52] Bluetooth: hci0: command tx timeout [ 576.257424][T29701] IPVS: using max 39 ests per chain, 93600 per kthread [ 576.382618][T29700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.399110][T29700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.435493][T29710] syzkaller0: entered promiscuous mode [ 576.440999][T29710] syzkaller0: entered allmulticast mode [ 576.551904][T29700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.563510][T29700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.770743][T29700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.782283][T29700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.927708][T29748] netlink: 'syz.4.6523': attribute type 12 has an invalid length. [ 576.946865][T29748] netlink: 'syz.4.6523': attribute type 11 has an invalid length. [ 577.041701][T29700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.053376][T29700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.092522][T29754] tunl0: entered promiscuous mode [ 577.122359][T29754] netlink: 'syz.1.6525': attribute type 3 has an invalid length. [ 577.236900][ T8201] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.257086][ T8201] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.310112][T29762] can: request_module (can-proto-0) failed. [ 577.319138][ T75] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.332517][ T75] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.341333][T29761] can: request_module (can-proto-0) failed. [ 577.362691][ T75] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.372529][ T75] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.413757][ T75] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.453363][ T75] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.024540][T29818] netlink: 'syz.1.6544': attribute type 1 has an invalid length. [ 578.146749][ T8201] wlan1: Creating new IBSS network, BSSID 5e:f6:b3:28:df:66 [ 578.574759][T29852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.646403][T29854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.865621][T29878] netlink: 'syz.3.6560': attribute type 1 has an invalid length. [ 578.874630][T29878] netlink: 'syz.3.6560': attribute type 1 has an invalid length. [ 578.954409][T29885] pimreg: entered allmulticast mode [ 579.172335][T29899] bridge_slave_1: left allmulticast mode [ 579.186596][T29899] bridge_slave_1: left promiscuous mode [ 579.192616][T29899] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.224898][T29899] bridge_slave_0: left allmulticast mode [ 579.231889][T29899] bridge_slave_0: left promiscuous mode [ 579.247135][T29899] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.448503][T29918] netlink: 'syz.1.6569': attribute type 32 has an invalid length. [ 579.516916][T29918] bond2: option coupled_control: invalid value (52) [ 579.527907][T29918] bond2 (unregistering): Released all slaves [ 579.838481][T29943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.992023][T29960] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.066867][T29960] bridge0: entered allmulticast mode [ 580.133653][T29964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.391289][T29982] __nla_validate_parse: 19 callbacks suppressed [ 580.391307][T29982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6584'. [ 580.466954][T29983] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 580.565856][T29990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6587'. [ 580.798165][T30003] netlink: 'syz.4.6591': attribute type 10 has an invalid length. [ 580.824760][T30003] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 580.980044][T30015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6592'. [ 581.219992][T30032] netlink: zone id is out of range [ 581.244152][T30032] netlink: zone id is out of range [ 581.267302][T30032] netlink: zone id is out of range [ 581.281712][T30032] netlink: zone id is out of range [ 581.301177][T30032] netlink: zone id is out of range [ 581.318409][T30032] netlink: zone id is out of range [ 581.323765][T30032] netlink: zone id is out of range [ 581.348838][T30032] netlink: zone id is out of range [ 581.483316][T30044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6601'. [ 581.923602][T30075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 582.111296][T30090] syzkaller0: entered promiscuous mode [ 582.118744][T30090] syzkaller0: entered allmulticast mode [ 582.359959][T30109] team0: Device gtp0 is up. Set it down before adding it as a team port [ 582.455351][T30111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6618'. [ 582.465215][T30111] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6618'. [ 582.588508][T30123] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6622'. [ 582.628986][T30126] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6620'. [ 582.653477][T30125] wireguard0: entered promiscuous mode [ 582.707080][T30125] wireguard0: entered allmulticast mode [ 583.075548][T30153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6627'. [ 583.416297][T30171] xt_NFQUEUE: number of total queues is 0 [ 583.423740][T30171] netlink: 'syz.4.6632': attribute type 10 has an invalid length. [ 583.457860][T30171] bridge_slave_1: left allmulticast mode [ 583.471210][T30171] bridge_slave_1: left promiscuous mode [ 583.491068][T30171] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.559412][T30171] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 583.984897][T30205] [ 583.987281][T30205] ====================================================== [ 583.994300][T30205] WARNING: possible circular locking dependency detected [ 584.001322][T30205] syzkaller #0 Not tainted [ 584.005741][T30205] ------------------------------------------------------ [ 584.012752][T30205] syz.4.6645/30205 is trying to acquire lock: [ 584.018896][T30205] ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 584.028379][T30205] [ 584.028379][T30205] but task is already holding lock: [ 584.035738][T30205] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 584.045391][T30205] [ 584.045391][T30205] which lock already depends on the new lock. [ 584.045391][T30205] [ 584.055788][T30205] [ 584.055788][T30205] the existing dependency chain (in reverse order) is: [ 584.064783][T30205] [ 584.064783][T30205] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 584.072675][T30205] _raw_spin_lock_bh+0x36/0x50 [ 584.077959][T30205] nr_rt_ioctl+0x40c/0xf90 [ 584.082887][T30205] sock_do_ioctl+0x101/0x320 [ 584.087981][T30205] sock_ioctl+0x5c6/0x7f0 [ 584.092820][T30205] __se_sys_ioctl+0xfc/0x170 [ 584.097940][T30205] do_syscall_64+0xe2/0xf80 [ 584.102969][T30205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.109392][T30205] [ 584.109392][T30205] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 584.117382][T30205] _raw_spin_lock_bh+0x36/0x50 [ 584.122677][T30205] nr_rt_ioctl+0x215/0xf90 [ 584.127609][T30205] sock_do_ioctl+0x101/0x320 [ 584.132709][T30205] sock_ioctl+0x5c6/0x7f0 [ 584.137558][T30205] __se_sys_ioctl+0xfc/0x170 [ 584.142658][T30205] do_syscall_64+0xe2/0xf80 [ 584.147665][T30205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.154060][T30205] [ 584.154060][T30205] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 584.161861][T30205] __lock_acquire+0x15a5/0x2cf0 [ 584.167222][T30205] lock_acquire+0x106/0x330 [ 584.172234][T30205] _raw_spin_lock_bh+0x36/0x50 [ 584.177530][T30205] nr_rt_device_down+0xbe/0x860 [ 584.182887][T30205] nr_device_event+0x137/0x150 [ 584.188155][T30205] notifier_call_chain+0x19d/0x3a0 [ 584.193773][T30205] netif_close_many+0x2ae/0x420 [ 584.199128][T30205] netif_close+0x160/0x220 [ 584.204050][T30205] dev_close+0x10a/0x220 [ 584.208795][T30205] bpq_device_event+0x377/0x6a0 [ 584.214154][T30205] notifier_call_chain+0x19d/0x3a0 [ 584.219770][T30205] netif_close_many+0x2ae/0x420 [ 584.225132][T30205] netif_close+0x160/0x220 [ 584.230060][T30205] dev_close+0x10a/0x220 [ 584.234808][T30205] bond_setup_by_slave+0x5f/0x3d0 [ 584.240337][T30205] bond_enslave+0x847/0x3c40 [ 584.245432][T30205] bond_do_ioctl+0x6ec/0x8d0 [ 584.250524][T30205] bond_siocdevprivate+0x19c/0x1f0 [ 584.256137][T30205] dev_ifsioc+0xba6/0x1280 [ 584.261059][T30205] dev_ioctl+0x84c/0x1150 [ 584.265890][T30205] sock_ioctl+0x75f/0x7f0 [ 584.270733][T30205] __se_sys_ioctl+0xfc/0x170 [ 584.275840][T30205] do_syscall_64+0xe2/0xf80 [ 584.280849][T30205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.287245][T30205] [ 584.287245][T30205] other info that might help us debug this: [ 584.287245][T30205] [ 584.297454][T30205] Chain exists of: [ 584.297454][T30205] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 584.297454][T30205] [ 584.311261][T30205] Possible unsafe locking scenario: [ 584.311261][T30205] [ 584.318692][T30205] CPU0 CPU1 [ 584.324045][T30205] ---- ---- [ 584.329395][T30205] lock(nr_neigh_list_lock); [ 584.334057][T30205] lock(&nr_node->node_lock); [ 584.341676][T30205] lock(nr_neigh_list_lock); [ 584.348863][T30205] lock(nr_node_list_lock); [ 584.353438][T30205] [ 584.353438][T30205] *** DEADLOCK *** [ 584.353438][T30205] [ 584.361562][T30205] 2 locks held by syz.4.6645/30205: [ 584.366739][T30205] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 584.375526][T30205] #1: ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 584.385527][T30205] [ 584.385527][T30205] stack backtrace: [ 584.391404][T30205] CPU: 0 UID: 0 PID: 30205 Comm: syz.4.6645 Not tainted syzkaller #0 PREEMPT(full) [ 584.391422][T30205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 584.391432][T30205] Call Trace: [ 584.391441][T30205] [ 584.391448][T30205] dump_stack_lvl+0xe8/0x150 [ 584.391471][T30205] print_circular_bug+0x2e1/0x300 [ 584.391489][T30205] check_noncircular+0x12e/0x150 [ 584.391506][T30205] __lock_acquire+0x15a5/0x2cf0 [ 584.391529][T30205] ? __lock_acquire+0x6b5/0x2cf0 [ 584.391549][T30205] ? dsa_user_netdevice_event+0x495/0x2850 [ 584.391566][T30205] ? nr_rt_device_down+0xbe/0x860 [ 584.391585][T30205] lock_acquire+0x106/0x330 [ 584.391603][T30205] ? nr_rt_device_down+0xbe/0x860 [ 584.391622][T30205] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.391640][T30205] ? nr_rt_device_down+0xbe/0x860 [ 584.391659][T30205] _raw_spin_lock_bh+0x36/0x50 [ 584.391680][T30205] ? nr_rt_device_down+0xbe/0x860 [ 584.391703][T30205] nr_rt_device_down+0xbe/0x860 [ 584.391725][T30205] nr_device_event+0x137/0x150 [ 584.391743][T30205] notifier_call_chain+0x19d/0x3a0 [ 584.391761][T30205] netif_close_many+0x2ae/0x420 [ 584.391777][T30205] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.391792][T30205] ? __pfx_netif_close_many+0x10/0x10 [ 584.391809][T30205] ? bond_netdev_event+0x231/0xfc0 [ 584.391826][T30205] netif_close+0x160/0x220 [ 584.391841][T30205] ? __pfx_netif_close+0x10/0x10 [ 584.391856][T30205] ? __asan_memset+0x22/0x50 [ 584.391876][T30205] ? macvtap_device_event+0xd1/0x400 [ 584.391895][T30205] dev_close+0x10a/0x220 [ 584.391914][T30205] bpq_device_event+0x377/0x6a0 [ 584.391935][T30205] notifier_call_chain+0x19d/0x3a0 [ 584.391952][T30205] netif_close_many+0x2ae/0x420 [ 584.391969][T30205] ? __pfx_netif_close_many+0x10/0x10 [ 584.391988][T30205] netif_close+0x160/0x220 [ 584.392002][T30205] ? __pfx_netif_close+0x10/0x10 [ 584.392016][T30205] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.392033][T30205] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.392050][T30205] dev_close+0x10a/0x220 [ 584.392067][T30205] bond_setup_by_slave+0x5f/0x3d0 [ 584.392088][T30205] bond_enslave+0x847/0x3c40 [ 584.392104][T30205] ? unwind_get_return_address+0x4d/0x90 [ 584.392121][T30205] ? arch_stack_walk+0xfb/0x150 [ 584.392140][T30205] ? stack_trace_save+0xa9/0x100 [ 584.392158][T30205] ? __pfx_stack_trace_save+0x10/0x10 [ 584.392176][T30205] ? stack_depot_save_flags+0x33/0x810 [ 584.392194][T30205] ? __pfx_bond_enslave+0x10/0x10 [ 584.392230][T30205] ? apparmor_capable+0x137/0x1a0 [ 584.392251][T30205] ? full_name_hash+0x92/0xe0 [ 584.392271][T30205] bond_do_ioctl+0x6ec/0x8d0 [ 584.392286][T30205] ? __pfx_bond_do_ioctl+0x10/0x10 [ 584.392300][T30205] ? __mutex_trylock_common+0x158/0x260 [ 584.392316][T30205] ? __pfx___mutex_trylock_common+0x10/0x10 [ 584.392332][T30205] ? rcu_is_watching+0x15/0xb0 [ 584.392347][T30205] ? trace_contention_end+0x39/0x100 [ 584.392363][T30205] bond_siocdevprivate+0x19c/0x1f0 [ 584.392378][T30205] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 584.392393][T30205] ? full_name_hash+0x92/0xe0 [ 584.392411][T30205] dev_ifsioc+0xba6/0x1280 [ 584.392430][T30205] dev_ioctl+0x84c/0x1150 [ 584.392447][T30205] sock_ioctl+0x75f/0x7f0 [ 584.392470][T30205] ? __pfx_sock_ioctl+0x10/0x10 [ 584.392491][T30205] ? __fget_files+0x3a0/0x420 [ 584.392506][T30205] ? __fget_files+0x2a/0x420 [ 584.392522][T30205] ? bpf_lsm_file_ioctl+0x9/0x20 [ 584.392540][T30205] ? __pfx_sock_ioctl+0x10/0x10 [ 584.392560][T30205] __se_sys_ioctl+0xfc/0x170 [ 584.392580][T30205] do_syscall_64+0xe2/0xf80 [ 584.392596][T30205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.392610][T30205] ? trace_irq_disable+0x37/0x100 [ 584.392625][T30205] ? clear_bhb_loop+0x60/0xb0 [ 584.392641][T30205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.392655][T30205] RIP: 0033:0x7fe218b9aeb9 [ 584.392670][T30205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.392684][T30205] RSP: 002b:00007fe2199a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.392704][T30205] RAX: ffffffffffffffda RBX: 00007fe218e15fa0 RCX: 00007fe218b9aeb9 [ 584.392716][T30205] RDX: 00002000000000c0 RSI: 00000000000089f0 RDI: 0000000000000004 [ 584.392726][T30205] RBP: 00007fe218c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 584.392735][T30205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.392745][T30205] R13: 00007fe218e16038 R14: 00007fe218e15fa0 R15: 00007ffd9eb20238 [ 584.392761][T30205] [ 584.866047][T30205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.873087][T30205] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 584.883910][T30205] bond0: (slave gre0): Error -95 calling set_mac_address [ 584.908280][T30205] bond0: (slave rose0): Enslaving as an active interface with an up link